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ABSTRACT 

Objects  move,  collide,  flow,  bend,  heat  up,  cool  down,  stretch,  compress,  and  boil.  These  and  other 
things  that  cause  changes  in  objects  over  time  arc  intuitively  characterized  as  processes.  To  understand 
common  sense  physical  reasoning  and  make  programs  that  interact  with  the  physical  world  as  well  as  people 
do  we  must  understand  qualitative  reasoning  about  processes,  when  they  will  occur,  their  effects,  and  when 
they  will  stop.  Qualitative  Process  theory  defines  a  simple  notion  of  physical  process  that  appears  useful  as  a 
language  in  which  to  write  dynamical  theories.  Reasoning  about  processes  also  motivates  a  new  qualitative 
representation  for  quantity  in  terms  of  inequalities,  called  the  quantity  space. 

This  report  describes  the  basic  concepts  of  Qualitative  Process  theory,  several  different  kinds  of 
reasoning  that  can  be  performed  with  them,  and  discusses  its  impact  on  other  issues  in  common  sense 
reasoning  about  the  physical  world,  such  as  causal  reasoning  and  measurement  interpretation.  Several 
extended  examples  illustrate  the  utility  of  the  theory,  including  figuring  out  that  a  boiler  can  blow  up,  that  an 
oscillator  with  friction  will  eventually  stop,  and  how  to  say  that  you  can  pull  with  a  string,  but  not  push  with  it. 
This  report  also  describes  GIZMO,  an  implemented  computer  program  which  uses  Qual  ativc  Process  theory 
to  make  predictions  and  interpret  simple  measurements.  The  representations  and  algorithms  used  in  GIZMO 
arc  described  in  detail,  and  illustrated  using  several  examples. 
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1.  Introduction 

Many  kinds  of  changes  occur  in  physical  situations.  Objects  move,  collide,  flow,  bend,  heat  up.  cool 
down,  stretch,  and  boil.  These  and  other  things  that  cause  changes  in  objects  over  time  are  intuitively 
characterized  as  processes.  Much  of  formal  physics  consists  of  characterizations  of  processes  by  differential 
equations  that  describe  how  the  parameters  of  objects  change  over  time.  But  the  notion  of  process  is  richer 
and  more  structured  titan  this.  We  often  reach  conclusions  about  physical  processes  based  on  very  little 
information.  For  example,  we  know  that  if  we  heat  water  in  a  sealed  container  the  water  can  eventually  boil, 
and  if  we  continue  to  do  so  die  container  can  explode.  To  understand  common  sense  physical  reasoning  we 
must  understand  how  to  reason  qualitatively  about  processes.  We  must  be  able  to  determine  when  processes 
will  start  and  stop  and  what  their  effects  will  be.  This  diesis  describes  Qualtitativc  Process  theory  (abreviated 
QP).  a  theory  I  have  been  developing  for  this  purpose. 

I  hope  that  Qualitative  Process  dieory  will  provide  an  important  part  of  die  representational 
framework  for  common  sense  physical  reasoning.  In  addition.  QP  theory  should  be  useful  in  reasoning  about 
complex  physical  systems.  Programs  that  explain,  repair  and  operate  complex  engineered  systems  such  as 
nuclear  pow  er  plants  and  steam  machinery  w  ill  need  to  draw  the  kinds  of  conclusions  discussed  here.  Figure 
1  illustrates  some  of  the  common  sense  conclusions  about  physical  situations  dial  arc  discussed  in  this  report. 

Mow  to  reason  qualitatively  about  quantities  is  a  problem  diat  has  plagued  AT  Many  schemes  have 
been  tried,  including  simple  symbolic  vocabularies  (TAl.l.,  VFRY  TAFT,  etc.),  real  numbers,  intervals,  and 
fuzzy  logic.  None  are  very  satisfying.  The  reason  is  dint  none  of  die  above  schemes  makes  distinctions  diat 
arc  relevant  to  physical  reasoning.  Reasoning  about  processes  provides  a  strong  constraint  on  the  choice  of 
representation  for  quantities.  Processes  usually  start  and  stop  when  orderings  between  quantities  change 
(such  as  unequal  temperatures  causing  a  heat  How).  In  Qualitative  Process  theory  the  value  of  a  number  is 
represented  by  a  quantity  space,  a  partial  ordering  of  it  with  quantities  determined  by  the  domain  physics  and 
die  analysis  being  performed.  The  quantity  space  representation  appears  both  useful  and  natural  in  modeling 
a  wide  range  of  physical  phenomena. 

1.1  Motivation 

The  goal  of  naive  physics  [Hayes  1979a]  is  to  represent  die  common  sense  knowledge  people  have 
about  the  physical  world.  This  section  examines  why  a  theory  of  processes  is  needed,  what  representational 
burden  it  will  carry  in  naive  physics,  and  the  properties  such  a  dieory  must  have. 

1.1.1  Change,  histories,  and  processes 

Reasoning  about  the  physical  world  requires  reasoning  about  die  kinds  of  changes  diat  occur  and 
their  effects.  The  classic  problem  which  arises  is  the  frame  problem  [McCarthy  &  Hayes.  1969].  namely  when 
something  happens,  how  do  we  tell  which  facts  remain  true  and  which  facts  don’t?  Using  the  situational 
calculus  to  represent  the  changing  states  of  the  world  requires  writing  explicit  frame  axioms  th.it  state  what 
diings  change  and  what  diings  remain  the  same.  The  number  of  axioms  needed  rises  as  die  product  of  the 
number  of  predicates  and  the  number  of  actions,  and  so  adding  a  new  action  requires  adding  a  large  number 
of  new  axioms.  I  here  have  been  several  attempts  to  fix  diis  problem  (Tikes  &  Nilsson,  1971  ([Minsky,  1974). 
but  none  of  diem  arc  adequate.  Ilaycs  [Hayes,  1 979a)  argues  that  die  situational  calculus  is  fundamentally 
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Fig.  1.  Examples  of  QP  theory  conclusions 

Here  arc  some  conclusions  QP  theory  can  be  used  to  draw. 


Q:  What  might  happen  when  the  heat  source  is  turned  on? 

A:  The  water  inside  might  boil,  and  if  the  container  is  sealed  it  Might 
blow  up. 


Q:  Can  we  push  the  block  with  A  if  it  is  a  string? 

A:  No.  but  you  can  pull  the  block  If  it  is  taut. 

Q:  Assuming  A  is  an  elastic  band  and  the  block  Is  fixed  in  position, 
what  might  happen  If  we  pull  on  it? 

A:  It  would  stretch  and  if  pulled  hard  enough  would  break. 


Q:  What  happens  if  we  release  the  block? 

A:  Assuming  the  spring  doesn’t  collapse,  the  block  will  oscillate  back 
and  forth.  If  there  is  friction  it  will  eventually  stop. 

Q:  What  if  It  gets  pumped? 

A:  If  there  is  no  friction  the  spring  will  eventually  break.  If  there 
is  friction  and  the  pumping  energy  is  constant  then  there  will  be 
a  stable  oscillation. 
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impoverished,  and  has  developed  the  notion  of  histories  as  an  alternative. 

In  situational  calculus,  situations  are  used  to  model  the  world  at  different  times.  Situations  are 
connected  by  actions,  and  actions  are  specified  in  terms  of  the  facts  can  he  deduced  about  the  situation  which 
results  from  performing  die  action.  A  situation  lasts  as  long  as  no  action  occurs,  and  is  spatially  unbounded, 
lb  contrast,  histories  are  descriptions  of  objects  that  are  extended  through  time  but  arc  always  bounded 
spatially.  Histories  are  divided  into  pieces  called  episodes,  corresponding  to  what  is  happening  to  the  object 
(episodes  are  defined  more  precisely  in  section  2.7). 

Histories  help  solve  the  frame  problem  because  objects  can  interact  only  when  their  histories 
intciscct.  I  or  example,  suppose  we  are  building  a  click  in  our  basement.  In  testing  parts  of  this  gadget  we 
look  to  see  what  parts  touch  each  oilier,  what  parts  will  touch  each  other  if  they  move  in  certain  ways,  and  so 
on.  ilv  doing  so  we  build  descriptions  of  what  can  happen  to  die  pieces  of  die  clock.  We  do  not  usually 
consider  interactons  with  the  furnace  sitting  in  the  corner  of  die  basement,  because  whatever  is  happening  in 
there  is  spatially  isolated  from  us  (if  it  is  summer  it  can  also  be  "temporally  isolated"). 

I  lie  assumption  di.it  things  interact  only  when  they  touch  in  some  way  also  permeates  "non-naive" 
physics  -  action  at  a  distance  is  banished,  with  fields  and  particle  exchanges  postulated  to  prevent  its  return.  It 
means  that  spatial  and  temporal  representations  bear  most  of  the  burden  for  detecting  inMtcraciions.  While 
not  easy .  dev  eloping  such  representations  seems  far  more  productive  than  trying  to  develop  more  clever  frame 
axioms.1  In  particular,  the  qualitative  representations  of  space  and  time  developed  in  Artificial  Intelligence 
have  precisely  the  desired  properties  for  reasoning  with  histories  --  they  often  allow  ruling  out  interactions, 
even  with  very  little  information. 

Histories  are  to  qualitative  physical  reasoning  what  descriptions  of  state  parameters  over  time  arc  to 
classical  numerical  simulations.  Processes  arc  the  analog  of  die  differential  equations  used  to  describe  the 
dy  namics  of  the  system. 

While  the  classical  frame  problem  is  solved,  two  new  problems  arise  to  take  its  place. 

I  The  local  evolution  problem:  How  arc  histories  generated?  Under  what 
circumstances  can  they  be  generated  for  pieces  of  a  situation  independently,  and  then 
pieced  together  to  describe  the  whole  situation? 

In  the  basement  example  above,  for  instance,  we  could  safely  ignore  die  furnace  in  the  corner  and  concentrate 
on  figuring  out  how  pieces  of  the  clock  we  arc  building  will  move.  The  divisions  are  only  semi-independent, 
because  certain  kinds  of  changcscan  violate  die  conditions  for  isolation.  For  example,  if  the  internal 


1.  l  or  an  example  of  histories  in  use.  sec  [I'orbus.  1981aJ  which  describes  a  program  called  l-'ROB  that 
reasons  about  motion  through  space.  I'KOB  used  a  diagram  to  compute  qualitative  spatial  representations 
which  were  used  to  rule  out  potential  collisions  between  objects,  as  well  as  describing  possible  motions. 
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thermostat  of  die  furnace  gets  stuck  and  it  explodes,  we  can  no  longer  safely  ignore  it.2 

l  The  interscciion/intcraction  problem:  Which  intersections  of  histories  actually 
correspond  to  interactions  between  the  objects? 

Dropping  a  large  steel  ball  through  a  flame,  for  example,  won't  affect  its  motion  even  if  the  flame  is  hot 
enough  to  melt  it  unless  die  gases  arc  moving  fast  enough  to  impart  significant  momentum.  A  general 
solution  to  these  problems  requires  knowing  what  kinds  of  tilings  can  happen  and  how  they  can  affect  each 
other  --  in  other  w  ords,  a  theory  of  processes. 

In  classical  mechanics  a  dynamics  describes  how  forces  bring  about  changes  in  physical  systems.  For 
any  particular  domain,  such  as  particles  or  fluids,  a  dynamics  consists  of  identifying  die  kinds  of  forces  that  act 
between  die  classes  of  objects  in  the  domain  and  die  events  that  result  from  these  forces.  In  general,  we  can 
view  a  qualitative  dynamics  as  a  qualitative  theory  about  the  kinds  of  tilings  that  "can  happen"  in  a  physical 
situation.  Qualitative  Process  theory  claims  that  such  theories  have  a  common  character  in  that  they  arc 
organized  around  the  notion  of  physical  processes. 

1.1.2  Reasoning  tasks  involving  qualitative  dynamics 

Dynamics  is  central  in  many  reasoning  tasks  involving  naive  physics.  Kadi  task  is  a  different  "style" 
of  reasoning,  appropriate  for  solving  different  classes  of  problems.  Hie  catalog  below  covers  a  large 
proportion  of  die  cases.  Kxamplcs  of  inferences  from  several  of  these  categories  will  be  presented  later. 

Determining  activity:  Deducing  what  is  happening  in  a  situation  at  a  particular  time.  Besides 
providing  direct  answers  to  a  class  of  questions  ("what  is  happening  here?”),  it  is  also  a  basic  operation  in  the 
other  reasoning  tasks. 

Prediction:  Deducing  what  will  happen  in  the  future  of  some  situation.  We  often  must  work  with 
incomplete  information,  so  usually  we  can  only  generate  descriptions  of  possible  futures,  dc  Klccr’s  notion  of 
envisioning  is  a  powerful  theory  about  this  type  of  deduction.3 

Postdiction:  Deducing  how  a  particular  state  of  affairs  might  have  come  about.  ([Hayes,  1979b] 
contains  a  good  example  of  this  kind  of  deduction.)  Postdiction  is  harder  titan  prediction  because  of  the 
potential  necessity  of  postulating  objects.  If  we  have  complete  knowledge  of  a  situation  and  have  a  complete 
dynamics,  we  know  what  objects  will  vanish  and  appear.  But  usually  there  arc  many  ways  for  any  particular 
situation  to  have  come  about.  Consider  walking  back  to  our  basement  and  finding  a  small  pile  of  broken  glass 


2.  Unless  the  physical  situation  is  simulated  by  some  incremental  time  scheme,  the  reasoning  involved  in 
extending  histories  will  be  inherently  "non  monotonic"  (in  the  sense  of  [McDermott  &  Doyle.  1980J).  The 
reason  is  that  conclusions  reached  by  considering  one  part  ;of  a  system  may  have  to  be  reconsidered  in  the 
light  of  unexpected  interactions.  In  incremental  time  simulations  the  changes  in  the  entire  system  are 
computed  over  a  very  short  limcspan,  and  then  the  system  is  tested  to  see  if  any  new  interactions  occur  (such 
as  objects  colliding).  1  he  limcspan  is  usually  chosen  to  be  small  enough  that  interactions  during  a  step  can  be 
ignored.  The  cost  is  that  the  work  required  to  simulate  a  system  is  a  function  of  the  time  scale  rather  than  the 
actual  complexity  of  the  system's  behavior. 

3.  Useful  as  it  is.  envisioning  has  certain  limitations,  especially  as  a  sufficient  model  of  human  behavior  on 
this  task.  See  [Forbus,  1983a]  for  details. 
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on  the  floor.  Looking  at  it  we  may  deduce  that  a  coke  bottle  was  dropped,  but  we  do  not  know  much  about 
its  history  before  that,  or  about  anything  else  that  might  have  been  in  the  room  before  we  looked.  ITtcre 
could  have  been  a  troupe  of  jugglers  filling  the  basement,  each  manipulating  six  bottles,  and  a  minor  mishap 
occurred.  The  simplest  explanation  is  that  a  single  bottle  was  dropped,  but  our  criteria  for  simplicity  is  not 
due  solely  to  our  theories  of  physics.  Postdiction  witl  not  be  considered  further  here.1 

Skeptical  analysis:  Determing  if  the  description  of  a  physical  situation  is  consistent.  An  example  of 
this  task  is  evaluating  a  proposed  perpetual  motion  machine.  This  kind  of  reasoning  is  essential  if  a  rcasoncr 
is  to  recover  from  inconsistent  data  and  discover  inadequacies  in  its  theories  about  the  world. 

Measurement  interpretation:  Given  a  partial  description  of  the  individuals  in  the  situation  and  some 
observations  of  their  behavior,  inferring  what  other  individuals  exist  and  what  else  is  happening,  flic  first 
part  of  a  QP-based  theory  of  measurement  interpretation  is  described  in  [Forbus,  1983b]  (see  also  section  5.5). 

Experiment  planning:  Given  knowledge  of  what  can  be  observed  and  what  can  be  manipulated, 
planning  actions  that  will  yield  more  information  about  the  situation. 

Causal  reasoning:  Computing  a  description  of  behavior  that  attributes  changes  to  particular  parts  of 
the  situation  and  particular  other  changes.  Not  all  physical  reasoning  is  causal,  especially  as  more  expert 
kinds  of  deductions  are  considered.2 3  Causality  seems  mainly  a  tool  for  assigning  credit  to  hypotheses  for 
observed  or  postulated  behavior.  Thus  it  is  quite  useful  for  generating  explanations,  measurement 
interpretation,  planning  experiments,  and  learning  (see  [Forbus  &  Gentner,  1983]). 

1.1.3  Desiderata  for  qualitative  dynamics  theories 

There  arc  three  properties  a  theory  of  dynamics  must  have  if  it  is  to  be  useful  for  common  sense 
physical  reasoning.  First,  a  dynamics  theory  must  explicitly  specify  direct  effects  and  specify  the  means  by 
which  effects  are  propagated.  Without  specifying  what  can  happen  and  how  the  tilings  that  happen  can 
interact,  there  is  no  hope  of  solving  either  the  local  evolution  or  intcrscction/intcraction  problems.  Second, 
the  descriptions  the  theory  provides  must  be  composablc.  It  should  be  possible  to  describe  a  very  complicated 
situation  by  describing  its  parts  and  how  they  relate.1  This  property  is  especially  important  as  we  move 
towards  a  complete  naive  physics  that  encompasses  many  domains.  In  dealing  with  a  single  style  of  reasoning 
in  a  particular  class  of  situations  an  ad  hoc  domain  representation  may  suffice,  but  sadly  the  world  docs  not 
consist  of  completely  separate  domains.  Transferring  results  between  several  ad  hoc  representations  may  be 
far  more  complex  than  developing  a  useful  common  form  for  dynamics  theories.4  Finally,  the  theory  should 


1.  But  see  [Simmons,  1983],  which  explores  the  problem  of  reconstructing  a  sequence  of  events  from  a  static 
final  state  in  geologic  map  interpretation,  an  interesting  combination  of  postdiction  and  measurement 
interpretation. 

2.  Constraint  argument  often  seem  magical  to  the  uninitiated,  which  makes  it  unlikely  that  they  arc  central  in 
naive  physics.  In  teaching,  usually  some  kind  of  animistic  explanation  is  proposed  to  justify  constraint 
arguments  to  non-experts  ("the  particle  senses  which  path  has  the  least  action"). 

3.  Producing  models  with  this  property  is  a  motivation  for  the  "no-function-in-structure”  principle  [dc  Klccr 
&  Brown,  1983]. 

4.  An  initial  exploration  of  linking  results  from  reasoning  within  multiple  domains  is  described  in  [Stanfill, 
1983]. 
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allow  graceful  extension.  First,  it  should  be  possible  to  draw  at  least  the  same  conclusions  with  more  precise 
data  as  can  be  drawn  with  weak  data.  Second,  it  should  be  pos.>.;;ic  to  resolve  the  ambiguities  that  arise  from 
weak  data  with  more  precise  information. 

These  properties  arc  not  independent  --  for  example,  specifying  direct  and  indirect  effects  cleanly  is 
necessary  to  ensure  composability.  Nevertheless,  they  arc  not  easy  to  achieve.  Graceful  extension  is  bound 
up  w  ith  the  notion  of  good  qualitative  representations.  Qualitative  representations  allow  the  construction  of 
descriptions  that  include  the  possibilities  inherent  in  incomplete  information.  If  designed  properly,  more 
precise  information  can  be  used  to  decide  between  these  alternatives  as  well  as  perform  more  sophisticated 
analyses.  Representing  quantities  by  symbols  like  TALL,  and  VHRY-TAL1.  or  free  space  by  a  uniform  grid, 
for  instance,  docs  not  allow  more  precise  information  to  be  easily  integrated. 

Importantly,  although  all  qualitative  descriptions  arc  approximations,  not  all  approximations  are 
good  qualitative  descriptions.  Changing  a  value  in  a  qualitative  representation  should  lead  to  qualitatively 
distinct  behavior  or  change  of  state.  Consider,  for  example,  heating  a  pan  of  water  on  a  stove.  Suppose  we 
represent  die  value  of  the  temperature  of  die  water  at  any  time  by  an  interval,  and  die  initial  temperature  is 
represented  by  the  interval  [70.0  80.0],  indicating  that  its  actual  temperature  is  somewhere  between  70  and  80 
degrees  farenheit.  Changing  the  "value"  of  its  temperature  to  [70.0  85.0[  doesn't  change  our  description  of 
what's  happening  to  it  (namely,  a  heat  flow),  whereas  changing  it  to  [70.0  220.0]  changes  what  we  think  can  be 
happening  to  it  --  it  could  be  boiling  as  well.  While  an  interval  representation  always  makes  certain 
distinctions,  they  usually  arc  not  distinctions  relevant  to  physical  reasoning. 

A  purely  qualitative  theory  cannot  hope  to  capture  the  full  scope  of  human  reasoning  about  physical 
domains.  However,  by  defining  a  basic  theory  using  qualitative  representations,  we  can  later  add  theories 
involving  more  precise  information  --  perhaps  such  as  intervals  --  to  draw  more  precise  conclusions.  In  other 
words,  we  would  like  extensions  to  our  basic  theory  to  have  die  logical  character  of  extension  dicories  -  more 
information  should  result  in  a  wider  class  of  deductions,  not  changing  details  of  conclusions  previously  drawn. 
In  this  way  we  can  add  theories  dial  capture  more  sophisticated  reasoning  (such  as  an  engineer  would  do 
when  estimating  circuit  parameters  or  stresses  on  a  bridge)  onto  a  common  base. 

1.2  Perspective 

The  present  theory  has  evolved  from  several  strands  of  work  in  Artificial  Intelligence.  The  first 
strand  is  die  work  on  envisioning,  started  by  dc  Klecr  [dc  Klccr,  1975](scc  also  [dc  Klcer,  1979J[Forbus, 
I981a|).  Knvisioning  is  a  particular  style  of  qualitative  reasoning.  Situations  arc  modeled  by  collections  of 
objects  with  qualitative  slates,  and  what  happens  in  a  situation  is  determined  by  running  simulation  rules  on 
the  initial  qualitative  states  and  analyzing  the  results.  ITic  weak  nature  of  the  information  means  the  result  is 
a  directed  graph  of  qualitadvc  states  that  corresponds  to  the  set  of  all  possible  sequences  of  events  that  can 
occur  from  the  initial  qualitative  state.  This  description  itself  is  enough  to  answer  certain  simple  questions, 
and  more  precise  information  can  he  used  to  determine  what  will  actually  happen  if  so  desired. 

Two  distinct  ontologies  have  been  used  in  envisioning  systems.  In  die  first  ontology,  used  for 
reasoning  about  motion,  a  collection  of  simulation  laws  associated  with  an  object  completely  defined  its 
behavior.  While  this  ontology  works  for  objects  in  isolation,  there  is  no  way  to  create  simulation  laws  for  a 
compound  object  from  simulation  laws  for  its  components.  This  makes  reasoning  about  several  such  objects 
connected  together  impossible.  The  second  ontology  is  essentially  a  qualitative  version  of  system  dynamics 
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[Shearer.  Murphy  &  Richardson.  1967],  representing  a  system  as  devices  connected  together  in  a  fixed 
manner.  Hut  even  this  representation  is  impoverished:  the  processes  implicitly  represented  in  the  device  laws 
often  involve  several  objects  at  once  in  an  interdependent  fashion.  Consider  a  liquid  flow  cleaning  between 
two  tanks  that  arc  partially  filled  with  water  and  connected  by  a  pipe.  In  the  device-centered  ontology,  this 
situation  would  be  represented  by  die  level  in  one  tank  rising,  the  level  in  the  other  tank  falling,  and  motion 
of  the  liquid  in  the  pipe  from  the  source  of  the  flow  to  die  destination.  Hut  the  cause  of  these  changes  --  die 
liquid  flow  -  is  not  explicitly  represented.  In  addition,  no  means  is  prov  ided  to  model  changes  in  how  devices 
affect  each  other  (i.c..  unanticipated  changes  in  the  connectivity  of  the  system),  nor  for  objects  vanishing  and 
appearing.  1'his  means  many  situations  diat  we  easily  reason  about  can  be  represented  at  best  unnaturally  -- 
such  as  boiling  water  on  a  stove,  in  which  steam  appears  and  (eventually)  die  water  vanishes.  QP  theory 
explicitly  represents  die  existence  of  objects  and  provides  ways  to  describe  die  conditions  under  which  they 
can  be  created  and  destroyed,  and  thus  should  provide  die  basis  for  building  more  flexible  and  natural 
descriptions. 

The  second  strand  of  work  concerns  the  representation  of  quantity.  Most  Al  schemes  for  qualitative 
reasoning  about  quantities  violate  what  1  call  die  relevance  principle  of  qualitative  reasoning  --  qualitative 
reasoning  about  something  continuous  requires  some  kind  of  quantization  to  form  a  discrete  set  of  symbols; 
die  distinctions  made  by  the  quanti/ation  must  be  relevant  to  die  kind  of  reasoning  being  performed.  Almost 
all  previous  qualitative  representations  for  quantity  violate  this  principle.  One  exception  is  die  notion  of 
quantity  introduced  by  dc  Klecr  as  part  of  Incremental  Qualitative  (IQ)  analysis  [de  Kleer,  1979],  which 
represented  quantities  according  to  how  they  changed  when  a  system  input  was  perturbed  -  increasing, 
decreasing,  constant,  or  indeterminate.  For  more  genera)  physical  reasoning  a  richer  theory  of  quantity  is 
necessary.  IQ  analysis  alone  does  not  allow  die  limits  of  processes  to  be  deduced,  For  instance,  IQ  analysis 
can  deduce  diat  the  water  in  a  kettle  on  a  lit  stove  wotdd  heat  up,  but  not  that  it  wotdd  boil.  IQ  analysis  docs 
not  represent  rates,  so  we  could  not  deduce  that  if  the  fire  on  the  stove  were  turned  down  die  water  would 
take  longer  to  boil  (Section  5.4  describes  how  diis  conclusion  can  be  drawn).  The  notion  of  quantity  provided 
by  QP  theory  is  useful  for  a  w  ider  range  of  inferences  about  physical  situations  than  the  IQ  notion. 

The  final  strand  relevant  to  the  theory  is  the  naive  physics  enterprise  initiated  by  Pat  llaycs  [Hayes. 
1979a].  The  goal  of  naive  physics  is  to  develop  a  formalization  of  our  common  sense  physical  knowledge. 
From  the  perspective  of  naive  physics.  Qualitative  Process  theory  is  a  cluster  -  a  collection  of  knowledge  and 
inference  procedures  that  is  sensible  to  consider  as  a  module.  The  introduction  of  explicit  processes  into  die 
ontology  of  naive  physics  should  prove  quite  useful.  For  instance,  in  Hayes'  axioms  for  liquids  ([Hayes, 
1979b])  information  about  processes  is  encoded  in  a  form  very  much  like  the  qualitative  state  idea.1  This 
makes  it  difficult  to  reason  about  what  happens  in  situations  where  more  than  one  process  is  occurring  at  once 
-  Hayes'  example  is  pouring  water  into  a  leaky  tin  can.  In  fact,  difficulties  encountered  in  trying  to  implement 
a  program  based  on  his  axioms  for  liquids  were  a  prime  motivation  for  developing  Qualitative  Process  theory. 
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1.3  Overview 

1'his  report  describes  tire  fundamentals  of  Qualitative  Process  theory,  and  describes  an  implemented 
computer  program,  called  GIZMO,  which  uses  Qualitative  Process  theory  to  draw  conclusions  about  the 
physical  world.  The  report  is  divided  into  two  major  sections,  "theory"  (chapters  2  -  5)  and  "practice" 
(chapters  6  -  10).  livery  thing  in  the  "practice"  chapters  is  fully  implemented  and  runs  as  suited.  Anything  in 
the  "theory"  chapters  which  is  not  mentioned  in  live  practice  chapters  should  not  be  assumed  to  be  part  of  a 
currently  running  program.  While  perhaps  unusual.  I  hope  this  organization  will  dispell  the  usual  hazy 
boundaries  in  Al  papers  drawn  between  what  has  been  demonstrated  to  run  and  what  hasn't. 

Mere  are  the  contents  of  die  "theory"  section: 

Chapter  2  provides  the  basic  framework  for  representing  objects,  suites,  histories, 
quantities,  and  relationships  between  quantities.  The  quantity  space  is  introduced 
to  provide  a  qualitative  description  of  numerical  values,  and  the  idea  of  a 
qualitative  proportionality  is  introduced  to  describe  functional  dependencies. 

Individual  views  arc  introduced  to  describe  both  the  contingent  existence  of  objects 
and  suites  of  objects. 

Chapter  3  introduces  processes,  describes  how  to  define  them,  and  explores 
associated  concepts  such  as  influences  and  vocabularies  of  processes.  It  also 
describes  the  basic  deductions  sanctioned  by  the  theory,  including  analyzing  the 
net  effects  of  several  processes  and  predicting  suite  changes. 

Chapter  4  illustrates  these  deductions  by  several  extended  examples,  including 
modeling  a  boiler,  motion,  materials,  and  an  oscillator. 

Chapter  5  explores  additional  consequences  of  QP  theory,  including  detecting 
changing  equilibriums,  causal  reasoning,  a  language  for  expressing  causal 
connections,  a  notion  of  differential  analysis,  and  a  theory  of  interpreting 
measurements  taken  al  a  single  instant. 

The  "practice"  section  includes: 

Chapter  6  provides  an  overview  of  GIZMO. 

Chapter  7  describes  how  the  various  constructs  of  QP  theory  arc  embodied  in 
GIZMO. 

Chapter  8  describes  GIZMO'S  language  for  representing  domain  models,  and 
simple  models  of  fluids  and  motion  that  arc  used  as  a  source  of  examples  for  the 
next  chapters. 


For bus 


-18- 


QP  theory 


Chapter  9  describes  the  algorithms  used  in  GIZMO  to  implement  the  basic 
deductions  of  QP  theory.  The  algorithms  are  written  in  "structured  english"  for 
readability. 

Chapter  10  describes  the  algorithms  which  implement  the  measurement 
interpretation  theory  presented  in  chapter  5. 

Chapter  11  describes  the  envisioning  algorithm,  describes  how  the  frame  problem 
is  solved  for  simulation  within  the  QP  ontology,  and  discusses  the  problem  of 
summarizing  descriptions  of  behavior. 

Finally,  chapter  12  provides  a  summary,  discusses  extensions  and  potential  applications,  and  places 
the  theory  into  the  perspective  of  other  recent  work  in  Artificial  Intelligence.  An  appendix  describes  the 
particulars  of  the  DL'BACl.F  inference  engine  which  underlies  GIZMO. 

The  casual  reader  should  read  chapters  2  and  3  to  get  the  basic  ideas  of  the  theory,  and  skim  the 
examples  in  chapters  4.  10,  and  11  to  get  an  idea  of  how  these  ideas  can  be  used  to  solve  problems.  The  reader 
interested  in  a  deep  understanding  of  the  theory  should  of  course  just  read  straight  through. 

A  word  on  notation.  Axioms  are  used  only  when  they  will  help  the  reader  interested  in  the  fine 
details.  Although  a  full  axiomatic  description  might  be  desirable,  there  are  a  host  of  complex  technical  details 
involved,  tew  of  which  essentially  contribute  to  understanding  the  ideas.  When  used,  axioms  arc  written  in  a 
more  or  less  standard  sorted  predicate  calculus  notation.  The  following  notationa!  conventions  arc  used  in 
axioms:  Predicates  and  relations  arc  capitalized  (e.g.,  Fluid-Connection),  and  functions  arc  in  lowercase  (c.g., 
anount-of,  made-of).  Sorts  arc  underlined  (c.g.,  time).  Individuals  (often  physical  objects)  arc  written  in 
upper  case  (e.g.,  wa)  and  variables  are  written  in  lower  case  (c.g.,  p).  Small  finite  sets  arc  enclosed  by  braces 
("{"  "}").  Meta-linguistic  entities  arc  italicized  and  surrounded  by  angle  brackets,  i.e., 

<a  number>  *  <a  numbtr>  ■  <a  number> 

When  non-standard  notation  is  introduced  an  effort  will  be  made  to  show  an  interpretation  of  it  in  terms  of 
logic.  This  should  not  necessarily  be  taken  as  an  endorsement  of  logic  as  "the  meaning  of’  the  statements. 
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2.  Objects  and  quantities 

To  talk  about  change  we  first  establish  some  conventions  for  describing  objects  and  their  properties 
at  various  times.  This  section  describes  the  temporal  notation  used  and  develops  the  representation  of 
quantity  and  the  quantity  spine  representation  for  values,  hnliviilual  views  arc  introduced  it)  describe  both  the 
contingent  existence  of  objects  and  object  properties  that  change  drastically  with  time.  The  idea  of  a 
qualitative  proportionality  (<*q)  is  introduced  to  describe  functional  dependencies  between  quantities.  Finally 
histories  arc  introduced  to  represent  "what  happens"  to  objects  over  time. 

2.1  Time 


We  will  use  the  representation  of  time  introduced  by  Allen  ([Allen,  1981]).  To  summarize,  time  is 
composed  of  intervals  that  may  be  related  in  several  ways,  such  as  one  interval  being  before,  after,  or  equal 
to  another.  A  novel  feature  of  this  representation  is  that  two  intervals  can  nicer,  that  is,  the  start  of  one 
interval  can  be  directly  after  die  end  of  another  interval  such  that  no  interval  lies  between  them  (i.c.,  in  this 
representation,  time  is  not  dense).  Instants  arc  represented  as  "very  short”  intervals  which  have  zero  duration 
but  still  have  distinct  beginnings  and  ends. 

Some  additional  notation  is  required.  The  functions  start  and  end  map  an  interval  to  instants  that 
serve  as  its  start  or  end  points.  The  function  during  maps  from  an  interval  to  the  set  of  intervals  and  instants 
contained  within  it.  We  will  assume  a  function  time  which  maps  from  instants  to  some  (implicit)  global 
ordering,  and  a  function  duration  which  maps  from  an  interval  to  a  number  equal  to  the  difference  between 
die  times  for  the  start  and  the  end  of  the  interval.  We  further  assume  dial  die  time  of  the  end  of  a  piece  of 
time  is  never  less  than  the  time  of  its  start,  so  dial  die  duration  of  an  instant  will  be  zero  while  die  duration  of 
an  interval  will  be  greater  dian  zero.  Finally,  we  will  use  the  modal  operator  T  to  say  that  a  particular 
statement  is  true  at  some  time,  such  as 

(T  A1 igned(PIPE3)  II) 

to  say  that  pipe3  is  aligned  at  (or  during)  n.  Often  the  temporal  scope  of  a  statement  will  be  clear  in  context, 
in  which  case  we  will  not  bother  to  use  T. 


2.2  Quantities 

Processes  affect  objects  in  various  ways.  Many  of  these  effects  can  be  modeled  by  changing 
parameters  of  the  object,  properties  whose  values  are  drawn  from  a  continuous  range,  llic  representation  of  a 
parameter  for  an  object  is  called  a  quantity.  Fxamplcs  of  parameters  that  can  be  represented  by  quantities 
include  the  pressure  of  a  gas  inside  a  container,  one  dimensional  position,  the  temperature  of  some  fluid,  and 
the  magnitude  of  the  net  force  on  an  object. 

The  predicate  Quantity-Type  will  be  used  to  indicate  that  a  symbol  is  used  as  a  function  that  maps 
objects  to  quantities,  lo  say  th.it  an  object  has  ,i  quantity  of  a  particular  type  we  will  use  the  relationship 
Has -Quantity.  Figure  2  illustrates  some  quantities  that  pertain  to  the  liquid  in  a  cup. 
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Fig.  2.  Quantities 

Quantities  represent  continuous  parameters  of  objects.  Here  arc  some  quantities  that  arc  used  in  representing 
the  liquid  in  the  cup  below. 


Quant ity-Type( amount-of) 
Quant ity-Type( level ) 

Quant i ty- Type (pres sura) 
Quantity-Type(voluni«) 

Has-Quantity(WC.  amount-of) 
Has-Quantiiy(VfC,  level) 
Ha$-Quantity(WC.  pressure) 
Ha$-Quantity(WC,  volume) 


we 


2.3  Parts  of  quantities 

A  quantity  consists  of  two  parts,  an  amount  and  a  derivative.  The  derivative  of  a  quantity  can  in  turn 
be  the  amount  of  another  quantity  (for  example,  the  derivative  of  (one  dimensional)  position  is  the  amount  of 
(one  dimensional)  velocity).  Amounts  and  derivatives  are  numbers,  and  the  functions  a  and  o  map  from 
quantiues  to  amounts  and  derivatives  respectively.  Every  number  has  distinguished  parts  sign  and  magnitude. 
The  functions  s  and  m  map  from  numbers  to  signs  and  magnitudes  respectively.  For  conciseness,  the 
combinations  of  these  functions  that  select  parts  of  quantities  will  be  noted  as: 

An  -  magnitude  of  the  amount 
as  -  sign  of  the  amount 
Dm  -  magnitude  of  the  derivative,  or  rate 
os  -  sign  of  the  derivative 

Numbers,  magnitudes,  and  signs  take  on  values  at  particular  times.  When  we  wish  to  refer  to  the 
value  of  a  number  or  part  of  a  number,  we  will  write 

(M  Q  t) 

This  statement  is  read  as  "the  value  of  Q  measured  at  t".  (Notice  that  m  is  not  the  same  as  m.)  Often  we  will 
find  it  convenient  to  speak  of  the  value  of  a  quantity,  meaning  the  value  of  its  amount.  Figure  3  illustrates  the 
use  of  M. 

Signs  can  take  on  the  values  -l,  o,  and  l.  We  will  take  elements  of  m  as  the  model  for  the  values  of 
numbers  and  elements  of  the  non-negative  reals  as  our  model  for  the  values  of  magnitudes  so  that  operations 
of  comparison  and  combination  arc  well  defined.1  Importantly,  in  basic  Qualitative  Process  theory  we  will 
never  xnow  actual  numerical  values.  What  we  do  know  about  values  is  described  next. 
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Fig.  3.  m  describes  values  at  different  times 

Here  arc  some  facts  about  the  liquids  in  the  two  containers  below  expressed  as  relationships  between  their 
quantities: 


WC  WD 


start(l) 


end(l) 


(M  A[amount-of (WC)  start(I))  >  (M  A[amount-of (WO)  itart(I)) 
(M  A[amount-of  (WC)  «nd(I))  <  (M  A[amount-of (WD)  »nd(I)) 

(M  Ds[amount-of (WC)]  I)  -  -1 
(M  Oj[amount-of ( WD) ]  I)  ■  1 


14  Quantity  spaces 

The  value  of  a  number  is  described  in  terms  of  its  quantity  space.  A  quantity  space  is  a  collection  of 
numbers  which  form  a  partial  order.  Figure  4  illustrates  a  quantity  space  for  the  levels  of  fluid  in  two  tanks  c 
and  o  connected  by  a  pipe.  Note  that  the  orderings  and  even  the  elements  of  a  quantity  space  will  not  be 
fixed  over  time.  The  elements  in  a  particular  quantity  space  are  determined  by  the  comparisons  needed  to 
establish  certain  kinds  of  facts,  such  as  whether  or  not  processes  are  acting  (we  will  soon  see  another  kind  of 
description  that  contributes  elements  to  quantity  spaces).  There  will  only  be  a  finite  number  of  elements  in 
any  reasonable  quantity  space,  hence  there  are  only  a  finite  number  of  distinguishable  values.  Thus  the 
quantity  space  is  a  good  symbolic  description. 

Two  elements  that  are  ordered  and  with  no  elements  in  the  ordering  known  to  be  between  them  will 
be  called  neighbors.  For  die  quantity  space  in  figure  4.  iev«i(wo)  has  height(bottom(0))  .  h«ight( top(O) ), 
and  i*v«i(wc)  as  neighbors,  but  not  neignt(  top(C) ).  Determining  neighbors  will  be  important  in 
determining  when  processes  start  and  stop  acting. 

We  shall  now  be  a  bit  more  formal  about  defining  quantity  spaces  and  the  relationships  between 
parts  of  quantities.  Readers  who  arc  uninterested  in  the  details  may  wish  to  skip  to  the  next  section. 
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Fig.  4.  Graphical  notation  for  a  quantity  space 

we  and  wo  arc  the  pieces  of  liquid  in  containers  c  and  o  respectively.  The  arrow  indicates  that  the  quantity  at 
the  head  is  greater  than  the  quantity  at  die  tail.  As  drawn,  levei(wc)  and  height(top(0))  are  unordcrcd. 
For  simplicity,  we  ignore  temporal  references  here. 


i 


Container  C 

Container  D 


Fluid  path  Pi 


height  (bottom  (D)) 


level  (WO' 


height  (top  (D» 


level  (WC) 


height  (top  (C)) 


The  quantity  space  of  a  number  consists  of  a  set  of  elements  (numbers  or  magnitudes,  often  the 
amounts  of  quantities)  B  and  a  set  of  orderings.  In  basic  QP  theory  the  value  of  a  number  n  will  be  described 
by  the  ordering  relations  between  n  and  the  other  elements  in  die  quantity  space.  The  value  is  completely 
specified  if  the  orderings  between  every  element  of  B  is  known  (i.e..  the  orderings  form  a  total  order),  and  is 
incomplete  otherwise.  Every  quantity  space  can  in  principle  be  completely  specified.  A  collection  of 
inequality  statements  whose  union  with  the  orderings  of  an  incompletely  specified  quantity  space  results  in 
die  quantity  space  being  completely  specified  w  ill  be  called  a  completion  of  that  quantity  space. 

All  quantity  spaces  have  the  distinguished  element  zero,  zero  serves  to  connect  the  sign  of  a 
number  with  inequality  statements,  as  follows: 


V  n  €  number  V  t  £  Uma 

(M  n  t)  »  ZERO  — »  (M  s[n]  t)  •  1 

A  (M  n  t)  •  ZERO  —  ( M  s[n]  t)  ■  0 

A  (M  n  t)  «  ZERO  **  (M  s[n]  t)  •  -1 


Note  also  that  the  values  of  magnitudes  arc  related  to  the  values  of  signs  and  the  number,  in  that: 


V  n  €  number  V  t  €  time 

Taxonomy((M  m[n]  t)  >  ZERO.  (M  m[n]  t)  ■  ZERO) 

A  ( ( M  m[n]  t)  •  ZERO  •*  (M  s[n]  t)  •  0) 

(Taxonomy  is  drawn  from  [Hayes.  1979b]  and  means  that  exaedy  one  of  its  arguments  is  true.)  Thus  if  the 
value  of  D$  for  some  quantity  is  o,  then  die  derivative  itself  is  zero  and  die  quantity  is  unchanging.  We  will 
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sometimes  need  to  combine  sign  values  across  addition.  Figure  5  illustrates  the  algebra  used. 


[I 


Fig.  5.  Combining  sign  values 

This  table  specifics  how  sign  values  combine  across  addition.  The  cases  marked  by  notes  require  additional 
information  to  determine  the  result. 


For  s[A  +  B] 


s[B] 

-1  0  1 


-1  |  -1 

1  -1  1 

N1  | 

•[A] 

0  |  -1 

1  0  | 

1  1 

1  |  N1 

1  1  1 

1  1 

Nt;  if 
if 
if 

m[A]  >  n[B]  then 
m[A]  <  m[B]  then 
m[A]  •  n[8]  then 

s[A] 

S[B] 

0 

,v 
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Objects  can  be  created  and  destroyed,  and  their  properties  can  change  dramatically.  Water  can  be 
poured  into  a  cup  and  then  drunk,  for  example,  and  a  spring  can  be  stretched  so  far  dial  it  breaks.  Some  of 
these  changes  depend  on  values  of  quantities  -  when  die  amount  of  a  piece  of  fluid  becomes  zero  we  can 
consider  it  gone,  and  when  a  spring  breaks,  it  docs  so  at  a  particular  length  (which  may  depend  on  other 
continuous  parameters  such  as  temperature).  Individual  views  are  used  to  model  diese  states  of  affairs. 

An  individual  view  consists  of  four  parts.  It  must  contain  a  list  of  individuals,  the  objects  that  must 
exist  before  it  is  applicable.  It  has  quantity  conditions ,  statements  about  inequalities  between  quantities  of  the 
individuals  and  statements  about  whether  or  not  certain  other  individual  views  (or  processes)  hold,  and 
preconditions  that  are  still  further  conditions  diat  must  be  true  for  die  view  to  hold.  Finally,  it  must  have  a 
collection  of  relations ,  statements  that  are  true  whenever  the  view  is  true,  l-'igure  6  illustrates  a  simple 
description  of  die  fluid  in  a  container. 

For  every  collection  of  objects  diat  satisfies  die  description  of  the  individuals  for  a  particular  type  of 
individual  v  iew,  there  is  a  view  instance,  or  VI,  diat  relates  them.  Whenever  die  preconditions  and  quantity 
conditions  for  a  VI  hold  we  say  diat  its  status  is  active,  and  inactive  otherwise.  Whenever  a  VI  is  active  the 
specified  relations  hold  between  its  individuals.  An  individual  view  can  be  thought  of  as  defining  a  predicate 
on  (or  relation  between)  die  individual(s)  in  die  individuals  field,  and  we  w  ill  often  write  diem  that  way.  The 
contained  liquid  description  of  die  previous  figure  is  translated  into  logical  notation  in  figure  7  to  ’lli>«"i  :i. 

The  distinction  between  preconditions  and  quantity  conditions  is  important.  The  intu.aoii  is  to 
separate  changes  that  can  be  predicted  solely  within  dynamics  (quantity  conditions)  from  diosc  which  cannot 
(preconditions).  If  we  know  how  a  quantity  is  changing  (its  ds  value)  and  its  value  (specified  as  a  quantity 
space),  then  we  can  predict  how  that  value  will  change  (as  we  will  see  in  section  3.6).  We  cannot  predict 
w  ithin  a  purely  physical  theory  diat  someone  will  walk  by  a  collection  of  pipes  through  which  fluid  is  flowing 
and  turn  off  a  valve.  Despite  their  unpredictability,  we  still  want  to  be  able  to  reason  about  the  effects  of  such 


Fig.  6.  Individual  views  describe  objects  and  states  of  objects 

Here  is  a  simple  description  of  the  fluid  in  a  container.  This  description  says  that  whenever  Uicrc  is  a 
container  that  has  some  liquid  substance  then  there  is  a  piece  of  diat  kind  of  stuff  in  that  container.  We  will 
take  ”ainount-of*in"  to  map  from  substances  and  containers  to  quantities.  More  elaborate  models  are 
presented  later,  later  on. 

Individual  View  Contained-Liquid(p) 

Individual  $ : 

con  a  container 
sub  a  liquid 
Preconditions: 

Can-Conta1n-Substance( con,  sub) 

QuantityConditions: 

A[amount-of-in(sub,  con)]  >  ZERO 
Relations: 

There  is  p  £  Diece-of-stuff 
amount-of ( p )  *  amount-of-in( sub,  con) 
made-of(p)  ■  sub 
container(p)  •  con 
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Fig.  7.  Translation  of  individual  view  notation  into  logic 

Here  is  the  contained  liquid  description  of  the  previous  figure  translated  into  logical  notation. 

V  c  €  container  V  s  €  1  iauid 

Container(c)  A  Liquid(s)  =» 

(3  IV  €  view- instance 

:names  of  individuals  are  used  as  selector  functions 
con(IV)  *  c  A  sub(IV)  «  s 
;  logical  existence  of  individual  is  timeless 
A  (3  p  €  piece-of-stuff 

container(p)  *  c  A  made-of(p)  *  s) 

A  { V  t  €  time 

;it  is  active  whenever  Preconditions  and  Quantity  Conditions  hold 
(T  Status(IV,  Active)  t) 

♦-♦[(T  Can-Contain-Substance( con(  IV) ,  sub(IV))  t) 

A  (T  A[amount-of-in(sub(IV) ,  con(IV))]  >  ZERO  t)] 

;when  active,  p  exists  physically  and  its  amount  is  the 
;amount  of  that  kind  of  substance  in  the  container 
A(T  Status(IV,  Active)  t)  =» 

( ( T  Contained-Liquid(p)  t) 

A  Exists-In(p,  t) 

A  (M  amount-of(p)  t)  *  (M  amount-of-in(s ,  c)  t ) ) ) ) 

; In  general , 

V  IV  €  view-instance  V  t  €  time 

(T  Taxonomy(Status(IV,  Active),  StatusflV,  Inactive))  t) 


changes  when  they  do  occur,  hence  any  dependence  on  these  facts  must  be  explicitly  represented.  This  is  the 
role  of  preconditions. 

2.6  Functional  relationships 

A  key  notion  of  Qualitative  Process  theory  is  that  the  physical  processes  and  individual  views  in  a 
situation  induce  functional  dependencies  between  the  parameters  of  a  situation.  In  other  words,  by  knowing 
the  physics  you  can  tell  what,  if  anything,  will  happen  to  one  parameter  when  you  vary  another.  In  keeping 
with  the  exploration  of  weak  information,  we  define 

Qi  “0+  0? 

(read  "Qj  is  qualitatively  proportional  to  q2",  or  "Qj  q-prop  Q?")  to  mean  "there  exists  a  function  that 
determines  Qr  and  is  increasing  monotonic  (i.c.,  strictly  increasing)  in  its  dependence  on  q2".  In  algebraic 
notation,  we  would  write 

Qi  ■  f( . . - .  02....) 

If  the  function  is  decreasing  monotonic  (i.c.,  strictly  decreasing)  in  its  dependence  on  q2,  wc  say 
Qi  “q-  Qz 

and  if  wc  don’t  know  whether  it  is  increasing  or  decreasing, 

Qi  kq  $2 
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For  example,  we  would  express  the  fact  that  the  level  of  water  in  a  cup  increases  as  the  amount  of  water  in  the 
cup  increases  by  adding  into  the  relations  of  the  contained  liquid  description: 

level(p)  txg*  amount-of(p) 

It  is  important  to  notice  how  little  information  ocq  carries.  Consider  the  relationship  between  level 
and  amount-of  staled  above.  Effectively,  all  we  know  is  that,  barring  other  changes,  when  amount-of  rises  or 
falls  level  will  also.  From  this  statement  alone  we  do  not  know  what  other  parameters  might  affect  level, 
nor  do  we  know  the  exact  way  level  varies  with  amount-of.  That  statement  is  satisfied  by  all  of  the 
following  equations  (assuming  appropriate  range  restrictions): 

level(p)  ■  amount-of (p) 
level(p)  •  [amount-of (p)]* 
level(p)  *  sin(amount-of(p)) 
level(p)  •  amount-of(p)  *  temperature(p) 
and  many  more. 

Often  we  will  leave  the  function  implied  by  oc^  unnamed.  When  it  is  necessary  to  name  the 
function,  we  will  say 

Funct1on-Spec(<id>,  <specs>) 

where  <id>  is  the  name  of  the  function  being  defined  and  <$pec>  is  a  set  of  statements  that  further  specify  the 
function.  Suppose  for  example  that  level  is  expressed  in  a  global  coordinate  system,  so  that  whenever  two 
open  containers  whose  bottoms  are  at  the  same  height  have  fluid  at  the  same  level,  the  pressure  each  fluid 
exerts  on  the  bottom  of  its  container  is  the  same.  We  might  introduce  a  function  p-i-fun  that  relates 
pressures  to  levels: 

Function-Spec(p-l-fun,  {pressure(p)  0Cq+  leval(p)}) 

Then  if  cl  and  c2  are  containers  such  dial 

(M  level(cl)  tO)  ■  (M  level(cZ)  tO) 

then  since 


pressure(cl)  •  p-l-fun(level(cl)) 
prassure(cZ)  •  p-l-fun(level(c2)), 

by  the  equalities  above  we  have 

(M  pressure(cl)  tO)  ■  (M  pressure(cZ)  tO) 

Notice  that  we  could  not  draw  this  conclusion  without  knowing  that  the  function  which  relates  pressures  to 
levels  is  the  same  for  both  containers. 

Sometimes  we  want  to  express  the  fact  that  a  function  depends  on  something  that  is  not  a  quantity. 
In  that  ease  we  will  say 


F-dependency(<id>,  <th1ng>) 
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In  die  contained  liquid  description,  for  instance,  the  level  depends  on  the  size  and  shape  of  die  container  as 
well  as  the  amount  of  water.  Assuming  shape  and  size  are  functions  whose  range  is  something  other  than 
quantities,  we  would  write 

Function-Spec(1evel-function.  {level(p)  <*q.,  amount-of(p)}) 

F - dependency ( level -function.  shape(container(p))) 

F - dependency ( 1  eve  1 -function .  size(container(p))) 

to  express  this  fact.  Thus  if  two  containers  have  the  same  size  and  shape,  a  particular  amount  of  water  will 
result  in  the  same  level,  but  if  the  size  or  shape  is  different  we  cannot  deduce  anything  about  the  relative 
levels  of  water. 

The  definition  of  is  motivated  in  part  by  issues  involved  in  learning  and  causal  reasoning,  and  we 
postpone  further  discussion  of  its  variants  until  Section  5.2.  There  is  one  other  kind  of  information  that  can 
be  specified  about  the  function  implied  by  “q's,  and  that  is  a  finite  set  of  correspondences  it  induces  between 
elements  of  the  quantity  spaces  it  connects.  An  example  of  a  correspondence  is  that  the  force  exerted  by  an 
clastic  band  is  zero  when  it  is  at  rest.  This  would  be  written: 

Correspondence! ( A[ in ter nal- force ( band) ] ,  ZERO) . 

(A[ length (band)],  A[rest- length (band)])) 

Correspondences  arc  the  means  of  mapping  value  information  (inequalities)  between  quantity  spaces  via  oc^. 
For  example,  if  the  length  of  the  band  described  above  is  greater  than  its  rest  length  the  internal  force  is 
greater  than  zero  (figure  8). 


Fig.  8.  Correspondences  link  quantity  spaces  across 

A  correspondence  statement  allows  information  about  inequalities  to  be  transferred  across  qualitative 
proportionalities  (“g’s).  The  rough  shape  of  the  graph  below  is  determined  by  the  oc^.  the  equality  between 
the  two  points  is  determined  by  the  correspondence. 


internal-force(band) 


ZERO  J 


Exact  shape  unknown. 


but  this  point 
is  on  it 


rest-length 

length(band) 


Internal-foree(band)  <Xq+  length(band) 

Correspondence  ( ( A[ in terna 1  - force( band) ] .  ZERO), 

(A[iength( band)],  A[rest-length(band)])) 
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2.7  Histories 

To  represent  how  things  change  through  time  we  use  Hayes'  notion  of  a  history.  We  assume  the 
concepts  introduced  in  [I  layes,  1979b]  as  our  starting  point.  To  summarize,  the  history  of  an  object  is  made 
up  of  episodes  and  events.  Fpisodes  and  events  differ  in  their  temporal  aspects.  F.vcnts  always  last  for  an 
instant,  while  episodes  usually  occur  over  an  interval  of  time.  Hach  episode  has  a  start  and  an  end  which  arc 
events  that  serve  as  its  boundaries.  Follow  ing  [Alien,  1981],  we  assume  that  episodes  and  events  meet,  that  is, 
the  start  of  some  piece  of  history  is  directly  after  the  end  of  the  previous  piece  with  no  time  in  between.  This 
allows  us  to  say.  for  example,  that  the  episode  of  heating  water  on  a  stove  is  ended  by  event  of  the  water 
reaching  its  boiling  temperature,  yet  during  the  episode  the  temperature  was  below  the  boiling  point. 

The  particular  class  of  histories  Hayes  introduced  will  be  called  parameter  histories,  since  they  are 
mainly  concerned  with  how  a  particular  parameter  of  a  specific  individual  changes.1  Objects  can  have  more 
than  one  parameter,  and  these  parameters  often  can  change  independently.  For  example,  if  we  drop  a  steel 
ball  past  a  flame,  the  ball  will  heat  up  a  bit  but  the  motion  won't  be  affected  (unless  the  combustion  gases 
impart  significant  momentum  to  it).  Thus  the  history  of  an  object  includes  the  union  of  its  parameter 
histories.  Figure  9  illustrates  the  parameter  histories  for  the  situation  just  described.  The  criteria  for 
individuation,  for  breaking  up  time  into  episodes  and  events  arc  changes  in  die  values  of  quantities  and  their 
parts.  The  spatial  component  of  parameter  histories  is  inherited  from  the  object  they  arc  a  parameter  of.  In 
figure  9.  for  example,  the  events  consist  of  die  ball's  position  reaching  h2  and  hi,  because  different  values 
occurred  before  and  after  diat  time.  The  final  component  of  an  object's  history  arc  die  histories  for  the 
processes  it  participates  in,  but  this  will  be  elaborated  later  in  section  3.7. 

Again  follow  ing  Hayes,  a  slice  of  a  history  denotes  a  piece  of  an  object’s  history  at  a  parucular  time. 
We  denote  the  slice  of  an  individual  i  at  time  t  by 

at(1,  t) 

If  we  let  all  functions,  predicates,  and  relations  that  apply  to  objects  apply  to  slices  as  well,  w  ith  functions  that 
map  from  objects  to  quantities  map  from  slices  to  values,  then  we  could  be  rid  of  t  and  m  and  just  talk  in  terms 
of  slices.  I'or  instance,  instead  of  writing 

(T  Aligned(Pl)  tO) 

(M  A[amount-of ( WC ) ]  tO )  >  (M  A[amount-of (WB)]  tO) 

we  would  write 


A1 igned(at(Pl.  tO)) 

A[amount-of (at(WC,  tO))]  >  A[amount-of(at(WB.  tO))] 

As  we  will  see  in  the  "practice"  chapters,  this  in  fact  is  the  convention  used  in  the  implementation  because  it 
simplifies  indexing.  However,  for  clarity  of  exposition  we  will  continue  to  use  T  and  m  in  presenUng  the 
theory. 

The  notion  of  history  so  far  is  "object  centered”.  Since  processes  will  often  act  between  several 


1.  In  fact,  Hayes'  examples  arc  parameter  histories  for  "amount  of  stuff',  representing  an  object  solely  as  a 
piece  of  space-time. 
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Fig.  9.  Parameter  histories  describe  when  values  change 

Part  of  the  parameter  histories  for  a  ball  being  dropped  through  a  flame  arc  depicted  below.  Time  runs  from 
top  to  bottom,  and  die  portion  of  the  history  that  depicts  what  is  happening  (motion  and  heat  flow)  is  not 
shown. 


History(B) 


Temperature(B)  Posit  ion(B) 


o 

I 


1 


path  of  B 
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objects,  we  need  a  way  of  talking  about  se\cral  objects  at  a  particular  time.  We  will  recycle  the  term  situation 
to  mean  a  collection  of  slices  for  a  set  of  objects  under  consideration  at  some  particular  time.  Unlike 
situational  calculus,  the  temporal  aspect  of  a  situation  can  be  cither  an  instant  or  an  interval.  Also,  a  situation 
is  now  spatially  bounded  -  its  spatial  extent  is  that  of  the  slices  that  comprise  it.  In  formulae  where  times  arc 
required,  we  will  assume  a  coercion  from  a  situation  or  event  to  its  time  so  that  we  can  freely  use  the  names  of 
situations  in  expressions  involving  t  and  m. 

The  question  of  what  constitutes  a  useful  situation  brings  us  back  to  the  local  evolution  problem 
described  in  the  introduction.  We  may  now  state  it  more  precisely:  Given  some  collection  of  objects  that  we 
know  about  at  a  particular  time,  can  we  figure  out  some  way  to  divide  them  up  into  'uations  that  can  be 
considered  scmi-indcpcndently?1  bor  the  moment  we  will  leave  the  criteria  of  what  constitutes  useful 
situations  unspecified;  we  w  ill  return  to  this  problem  in  Section  3.7  after  have  discussed  processes. 


1.  In  current  Al  systems  this  problem  usually  docs  not  arise  because  the  situations  under  consideration  arc 
composed  solely  of  relevant  objects.  However,  as  we  attempt  to  make  programs  that  can  deal  with  more 
realistic  problems  this  issue  w  ill  become  very  important. 
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3.  Processes 

A  physical  situation  is  described  in  terms  of  a  collection  of  objects,  their  properties,  and  the 
relationships  between  them.  So  far  our  description  of  die  world  has  been  static  --  we  can  describe  that  things 
are  different  from  one  time  to  another,  but  have  not  provided  die  means  by  which  changes  actually  occur. 
I  he  ways  in  which  things  change  are  intuitively  characterized  as  processes.  A  physical  process  is  something 
that  acts  through  time  to  change  the  parameters  of  objects  in  a  situation.  Kxamplcs  of  processes  include  fluid 
and  heal  flow,  boiling,  motion,  stretching  and  compressing. 

This  section  describes  what  processes  arc.  including  how  to  specify  them,  and  elaborates  the  notion 
of  influences.  A  catalog  of  basic  deductions  involving  processes  illustrates  die  kinds  of  conclusions  that  can  be 
draw  n  w  ithin  QP  dieory .  1  listorics  arc  extended  to  include  occurrences  of  processes,  and  the  role  of  processes 
in  specifying  a  language  of  behavior  is  discussed. 

3.1  Defining  processes 

A  process  is  defined  by  five  parts: 

I  The  individuals  it  applies  to, 

l  A  set  of  preconditions ,  statements  about  die  individuals  and  their  relationships 
other  than  quantity  conditions. 

I  A  set  of  quantity  conditions ,  that  arc  either  statements  of  inequalities  between 
quantities  belonging  to  die  individuals  (including  domain-dependent  constants 
and  functions  of  them)  or  statements  about  the  status  of  processes  and  individual 
views. 

i  A  set  of  relations  the  process  imposes  between  the  individuals,  along  with  new 
entities  diat  might  be  created. 

l  A  set  of  influences  imposed  by  the  process  on  the  parameters  of  the  individuals. 

Figure  10  illustrates  process  specifications  for  heat  flow  and  boiling.  (F'or  fans  of  logic,  figure  11  illustrates 
how  the  boiling  process  woidd  look  translated  into  predicate  calculus). 

As  you  can  sec,  a  process  is  just  like  an  individual  view  --  it  is  a  time-dependent  thing  --  except  it  has 
something  called  influences.  To  recapitulate,  for  every  collection  of  objects  that  satisfy  the  individuals 
specification  for  a  particular  type  of  process,  there  will  be  a  process  instance,  or  PI,  that  relates  them.  'Ihe 
process  instance  will  be  active,  representing  the  process  acting  between  these  individuals,  exactly  whenever 
both  the  preconditions  and  the  quantity  conditions  arc  tine.  Preconditions  are  those  factors  that  arc  outside 
Qualitative  Process  theory,  such  as  someone  opening  or  closing  a  valve  to  establish  a  fluid  path,  but  still 
relevant  to  whether  or  not  a  process  occurs.  I  he  quantity  conditions  are  those  statements  that  can  be 
expressed  solely  within  QP  theory,  such  as  requiring  the  temperature  of  two  bodies  to  be  different  for  heat 
flow  to  occur,  or  a  heat  flow  to  occur  as  a  prerequisite  to  boiling.  The  set  of  relations  associated  w  ith  a  process 
arc  the  relationships  it  imposes  between  the  objects  it  is  acting  on.  Ihe  relations  component  usually  describes, 


Forbus 


-32- 


Ql*  theory 


Fig.  10.  F.xamplcs  of  physical  process  definitions 

Meat  flow  happens  between  two  objects  that  have  heats  and  arc  connected  via  some  path  through  which  heat 
can  flow.  The  predicate  Heat-Ai igned  is  true  exactly  when  heat  can  flow  through  the  path.  Boiling  happens 
to  a  contained  liquid  being  heated,  and  creates  a  gas  made  of  the  same  stuff  as  the  liquid,  t-boi  t  represents 
die  boiling  point  for  the  piece  of  stuff  involved. 

process  heat-flow 
Individual s : 

sre  an  object.  Has-Quantity(src,  heat) 
dst  an  object.  Has-Quantity(dst,  heat) 
path  a  Heat-Path,  Heat-Connection(path ,  sre,  dst) 

Preconditions: 

Heat-AI igned(path) 

QuantityCondltions: 

A[temperature(src)]  >  A[temperature(dst)] 

Relations: 

Let  flow-rate  be  a  quantity 
A[fiow-rate]  >  ZERO 

flow-rate  ttg+  ( temperature(src)  -  temperature(dst)) 

Influences : 

I-(heat(src),  A[f low-rate]) 

I+(heat(dstj ,  A[f low-rate]) 


process  boiling 

Individual s : 

w  a  contained-1 iquld 

hf  a  process-instance,  process(hf)  •  heat-flow 

dst(hf)  »  w 


QuantityCondltions: 

Status(hf,  Active) 

A[temperature(w)]  ■  A[t-boil(w)] 

Relations: 

There  is  g  €  olece-of-stuff 
9®  s ( g ) 

substance(g)  •  substance(w) 
tempera ture(w)  ■  temperature(g) 

Let  generation-rate  be  a  quantity 
A[generation-rate]  >  ZERO 
generation-rate  ccg+  f low-rate(hf ) 

Influences: 

I-(heat(w),  A[f low-rate(hf )]) 

:The  above  counteracts  the  heat  flow’s  influence 
I-( amount -of(w) ,  A[generat ion-rate]) 

I  +  ( amount-of ( g) ,  A[gener at  Ion-rate]) 

I-(heat(w),  A[generation-rate]) 

I+(heat(g),  A[generation-rate]) 
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Fig.  II.  Moiling  expressed  as  an  axiom 

Here  is  how  the  boiling  description  could  be  written  as  an  axiom.  For  clarity,  temporal  references  have  been 
omitted.  Influence  adders  arc  explained  in  section  7.2. 

V  w  €  contained-! iquid  V  hf  €  process- instance 
(process(hf)  •  heat-flow  A  dst(hf)  *  w  =* 

[3  pt  t  process  -  ins  tance 

process(pi)  =  Coiling  A  w(pi)  ■  w  A  hf(pi)  •  hf 
A  [(Status(hf.  Active)  A  A[temperature(w)]  -  A[t-boil(w)]) 

Status(pi,  Active)] 

A  [Status(pi.  Active)  => 

[3  g  C  oiece-of-stuff  3  generation-rate  €  Quantity 
Boi1ing(w,  hf) 

A  gas(g) 

A  substance(g)  -  substance(w) 

A  temperature(w)  *  temperature(g) 

A  A[generation-rate]  >  ZERO 
A  generation-rate  <Xq+  f  1  ow-rate(hf ) 

A  A[flow-rate(hf )]  £  MinusInputs{Inf1uenceAdder(heat(w))) 

A  A[generation-rate] 

€  Minuslnputs( Influence Adder (amount-of(w))) 

A  A[generation-rate] 

€  Pluslnputs( Inf1uenceAdder(amount-of(g))) 

A  A[generation-rate] 

€  Minuslnputs( Inf 1 uenceAdder( heat(w) ) ) 

A  A[generation-rate] 

€  Pluslnputs( Inf 1uenceAdder(heat(g) ))]]] 


but  is  not  limited  to.  indirect  effects  via  functional  relationships  between  quantities,  such  as  the  flow  rate  in 
fluid  flow  being  qualitatively  proportional  to  the  difference  in  the  pressures  of  the  contained  fluids  involved. 
The  relations  also  include  descriptions  of  any  new  individuals  created  by  the  process,  as  for  example  the  steam 
generated  by  boiling,  and  facts  needed  by  externa!  representations,  such  as  describing  appearances. 
Influences  arc  discussed  next. 

3.2  Influences  and  integration 

Influences  specify  what  can  cause  a  quantity  to  change.  There  arc  two  kinds  of  influences,  direct  and 
indirect.  The  influences  component  of  a  process  specifics  the  direct  influences  imposed  by  dial  process.  For 
example,  in  a  flow  process  the  flow  rate  will  typically  correspond  to  the  increase  in  the  amount  of  "stuff’  at 
the  destination  and  to  the  decrease  in  the  amount  of  "stuff"  at  the  source.  To  indicate  that  the  number  n  is  a 
direct  influence  on  the  quantity  o,  we  write 

l+(Q.  n) 
l-(Q.  n) 

I±(Q.  n) 

according  to  whether  its  influence  is  positive,  negative,  or  unspecified.  Importantly,  processes  arc  the  only 
source  of  direct  influences.  If  at  least  one  process  is  directly  influencing  a  quantity  Q  at  some  particular  time, 
then  we  say  that  Q  is  directly  influenced.  If  a  quantity  is  directly  influenced,  then  its  derivative  equals  the  sum 
of  all  of  the  direct  influences  on  it. 

An  indirect  influence  occurs  when  a  quantity  is  a  function  of  some  other  quantity  that  is  changing. 
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Qualitative  proportionalities  (“g’s).  introduced  earlier,  arc  the  means  of  specifying  these  effects.  Sometimes 
we  will  refer  to  a  process  or  quantity  indirectly  influencing  some  quantity.  One  quantity  indirectly  influences 
another  if  the  second  quantity  is  qualitatively  proportional  to  Lhc  first.  A  process  indirectly  influences  a 
quantity  Q;  if  it  directly  influences  some  quantity  q2  which  in  turn  indirectly  influences  Qr 

Notice  that  direct  influences  tell  us  much  more  about  die  relationship  between  quantities  than 
indirect  influences.  Multiple  direct  influences  on  a  quantity  arc  combined  by  addition,  but  since  oc^  provides 
so  little  information  about  the  exact  form  of  flic  underlying  function,  die  result  of  multiple  indirect  influences 
cannot  always  be  calculated.  Section  3.6.3  discusses  this  issue  in  detail. 

At  any  particular  time  a  quantity  must  be  cither  directly  influenced,  indirectly  influenced,  or  not 
influenced  at  all.  Importantly,  w«c  assume  diat  no  quantity  is  both  directly  and  indirectly  influenced  at  once. 
A  domain  physics  diat  allows  a  quantity  to  be  both  directly  and  indirectly  influenced  at  the  same  time  is 
considered  to  be  inconsistent.  This  may  seem  odd,  given  that  relationships  between  quantities  in  "real" 
physics  arc  often  specified  as  constraint  equations.  For  example,  we  could  express  the  equation 

F  -  n  •  a 

three  different  ways  using  qualitative  proportionalities,  each  corresponding  to  one  parameter  being  described 
as  a  function  of  the  other  two.  How,  and  why,  do  we  select  a  particular  function  to  represent  the  constraint 
relationship? 

The  choice  is  made  to  reflect  the  way  causality  works  in  the  domain.  In  thinking  about  motion,  for 
instance,  we  cannot  directly  apply  an  acceleration  -  we  must  apply  a  force  to  cause  an  acceleration.  Similarly, 
we  cannot  by  accelerating  something  or  pushing  on  it  cause  its  mass  to  change,  yet  its  mass  will  affect  how 
much  acceleration  we  get  for  a  given  push.  Hence  the  proper  rendering  of  F*m»a  is 

*  “q*  F 

a  oCq.  m 

There  is  a  subtle  issue  lurking  here.  In  a  sense,  directly  influenced  parameters  arc  "independent”,  in  that  we 
can  cause  changes  in  them  directly  via  active  processes.  All  other  changes  in  quantities  are  an  indirect  result 
of  what  the  processes  do  to  the  directly  influenced  parameters.  The  choice  of  directionality  for  a  constraint 
equation  must  respect  this  fact.  The  full  importance  of  this  distinction  will  be  discussed  later  on  when 
examining  causal  reasoning  (section  5.2), 

The  influences  on  a  quantity  arc  combined  to  determine  its  derivative  (we  describe  just  how  later). 
A  notion  of  integrability  -  the  relationship  between  the  derivative  of  a  quantity  and  its  amount  -  is  needed. 
INscntially.  if  the  derivative  is  negative  then  the  amount  will  decrease  over  an  interval,  if  positive  then  the 
amount  will  increase,  and  if  zero  then  the  amount  will  be  the  same: 

V  q  €  quantity  VIC  interval 

( constant-s ign(D[q] ,  I)  => 

(M  0s[q]  during(I))  ■  -1  ♦-*  (M  A[q]  entf(I))  <  (M  A[q)  start(I)) 

A  (M  Ds[q]  during(I))  «  1  (M  A[q]  end ( I ) )  >  (M  A[q]  start(I)) 

A  (M  Ds[q]  during(I))  *  0  «■*  (M  A[q]  end  ( I ) )  ■  (M  A[q]  start(I)) 


where 
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V  n  €  numbers,  VIC  time . 

constant-sign(n  I)  s  (V  i  ^ .  i  2  C  during(I)  (M  s[n]  ij)  •  (M  s[n]  12)) 

I'll  is  statement  is  very  weak  compared  to  our  usual  notion  of  integrability.1  In  particular,  it  does  not  rest  on 
know  ing  an  explicit  function  describing  the  derivative  and  thus  docs  not  require  an  explicit  notion  of  integral. 

3.3  Limit  points 

Recall  that  a  quantity  space  consists  of  a  collection  of  elements  and  ordering  relations  between  them. 
The  major  source  of  elements  for  die  quantity  space  of  some  number  n  arc  the  numbers  and  constants  that  are 
compared  to  n  via  quantity  conditions.  Because  dicy  correspond  to  discontinuous  changes  in  die  processes 
diat  arc  occurring  (or  Individual  Views  that  hold),  dicy  arc  called  limit  points.  Limit  points  serve  as  boundary 
conditions.  For  example,  die  temperature  quantity  space  for  an  object  w  might  include  die  limit  points: 

t-melt(w)  t-boll(w) 

where  the  object  undergoes  phase  changes  that  result  in  qualitatively  distinct  behavior.  As  we  have  seen, 
these  different  modes  of  behavior  are  modeled  by  individual  views. 

3.4  'Lhc  sole  mechanism  assumption  and  process  vocabularies 

A  central  assumption  of  Qualitative  Process  theory  is  the  sole  mechanism  assumption,  namely: 

All  changes  in  physical  systems  are  caused  directly  or  indirectly  by  processes. 

As  a  consequence,  the  physics  for  a  domain  must  include  a  vocabulary  of  processes  that  occur  in  that  domain. 
This  process  vocabulary  can  be  viewed  as  specifying  die  dynamics  dicory  for  die  domain.  A  physical  situation, 
then,  is  described  by  a  collection  of  objects,  dieir  properties,  die  relations  between  them  (including  individual 
views),  and  the  processes  diat  are  occurring. 

The  sole  mechanism  assumption  allows  us  to  reason  by  exclusion.  If  we  make  the  additional 
assumption  diat  our  process  vocabulary  for  a  domain  is  complete,  then  we  know  what  types  of  quantities  can 
be  directly  influenced  (since  processes  are  die  only  sources  of  direct  influences).  If  we  understand  the  objects 
and  relationships  between  them  well  enough,  we  know  all  the  ways  quantities  can  be  indirectly  influenced. 
Thus  we  know  all  the  potential  ways  in  which  any  physical  situation  will  change.  Without  diese  closed  world 
assumptions2  about  die  form  and  contents  of  dynamical  theories,  it  is  hard  to  see  how  a  reasoning  entity  could 
use,  much  less  debug  or  extend,  its  physical  knowledge. 


1  If  the  tune  involved  is  an  instant,  then  we  assume  that  the  quantity  "doesn't  change  very  much"  during 
this  time.  To  be  more  exact,  we  assume  in  that  case  the  quantity  is  only  different  by  an  inflntcsimal  amount, 
in  equivalent! >.  that  influences  arc  finite.  This  assumption  underlies  ease  2  of  the  equality  change  law,  which 
will  be  discussed  shortly. 

2  See  (C  ollins  ct  al ,  1975).(Moorc,  1975),  (Reiter,  1980)  for  discussions  of  the  general  importance  of  closed 
world  assumptions. 
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3.5  Reprise 

Processes  should  be  first  class  entities  in  the  ontology  of  naive  physics.  It  may  he  tempting  to  think 
that  processes  are  mere  abbreviations  for  "deeper"  representations,  such  as  constraint  laws.  However,  they 
are  not.  I  hc  temptation  arises  both  because  constraint  laws  are  often  judged  to  be  the  most  elegant  physical 
descriptions  in  "noil-naive"  physics,  and  because  constraint-based  computer  models  have  been  fairly 
successful  for  analyzing  engineered  systems  ([Stallman  &  Sussman.  1 977],  [do  K leer  &  Sussman,  1978J). 
How  ever,  the  aims  of  naive  physics  are  not  die  same  as  die  aims  of  physics  or  engineering  analysis.  In  physics 
we  are  trying  to  construct  the  simplest  models  that  can  make  detailed  predictions  about  physical  phenomena. 
When  performing  an  engineering  analysis,  even  a  qualitative  one.  we  have  chosen  a  particular  point  of  view 
on  die  system  and  abstracted  away  certain  objects.  Unlike  cither  of  these  enterprises,  naive  physics  attempts 
to  uncover  die  ideas  of  physical  reality  that  people  actually  use  in  daily  life.  Thus  die  notions  diat  physics 
throws  away  (objects,  processes,  causality)  for  conciseness  in  its  formal  theory  --  the  equations  -  are  precisely 
what  we  must  keep. 

QP  theory  concerns  the  form  of  dynamics  theories,  not  dicir  specific  content.  For  example,  the  heat 
flow  process  illustrated  previously  adheres  to  energy  conservation,  and  docs  not  specify  diat  "stuff  is 
transferred  between  the  source  and  destination.  The  language  provided  by  the  theory  also  allows  one  to  write 
a  heat  flow  process  that  violates  energy  conservation  and  transfers  "caloric  fluid"  between  die  source  and 
destination.  The  assumptions  made  about  the  content  of  dynamics  dieorics  are  quite  weak.  Aside  from  the 
ability  to  write  a  wide  variety  of  physical  models,  the  weakness  of  its  assumptions  allow  other  dieorics  to  be 
written  that  impose  further  constraints  on  the  legal  vocabularies  of  processes.  For  example,  conservation  of 
energy  can  be  expressed  as  a  dicory  about  certain  types  of  quantities  and  the  allowable  patterns  of  influences 
in  processes  that  affect  those  types  of  quantities  (see  section  4.5).  We  do  not,  however,  wish  to  saddle  QP 
dicory  with  these  assumptions. 

3.6  Basic  deductions 

To  be  useful,  a  representation  must  support  deductions.  Several  basic  deductions  involving  the 
constructs  of  QP  dicory  arc  catalogued  below.  It  may  be  helpful  to  skip  momentarily  to  die  example  in  section 
4.1,  which  illustrates  these  deductions  step  by  step. 

3.6.1  Finding  possible  processes 

A  process  vocabulary  determines  the  types  of  processes  that  can  occur.  Given  a  collection  of 
individuals  and  a  process  vocabulary,  die  individual  specifications  from  the  elements  in  die  process 
vocabulary  must  be  used  to  find  collections  of  individuals  that  can  participate  in  each  kind  of  process.  These 
process  instances  (Pi's)  represent  the  potential  processes  that  can  occur  between  a  set  of  individuals.  A  similar 
deduction  is  used  for  finding  view  instances. 
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3.6.2  Determining  activity 

A  process  instance  has  a  status  of  Active  or  inactive  according  to  whether  or  not  the  particular 
process  it  represents  is  acting  between  its  individuals.  By  detaining  whether  or  not  die  preconditions  and 
quantity  conditions  are  true,  a  status  can  be  assigned  to  each  process  instance  for  a  situation.1  The  collection 
of  active  Pi's  is  called  the  process  structure  of  die  situation.  The  process  structure  represents  what  is 
happening  to  the  individuals  in  a  particular  situation.  Similarly,  die  view  structure  is  the  collection  of  active 
Vi  s  in  die  situation.  Whenever  we  discuss  the  process  structure,  we  will  usually  include  die  view  structure  as 
well.' 

3.6.3  Determining  changes 

Most  of  the  changes  in  an  individual  arc  represented  by  die  Ds  values  for  its  quantities.  A  os  value 
of  -l  indicates  die  quantity  is  decreasing,  a  value  of  i  indicates  that  it  is  increasing,  and  a  value  of  o  indicates 
that  it  remains  constant.  As  stated  previously,  there  arc  two  ways  for  a  quantity  to  change.  A  quantity  can  be 
directly  influenced  by  a  process,  or  it  can  be  indirectly  influenced  via  ct^.  (By  the  sole  mechanism 
assumption,  if  a  quantity  is  uninfluenced  its  Ds  value  is  o.)  Determining  the  Ds  value  for  a  quantity  is  called 
resolving  its  influences,  by  analogy  to  resolving  forces  in  classical  mechanics. 

Resolving  a  quantity  which  is  directly  influenced  requires  adding  up  die  influences.  If  all  die  signs 
of  the  influences  are  die  same  dicn  the  os  value  is  simply  die  sign  value  of  die  influences.  Since  we  do  not 
have  numerical  information,  ambiguities  can  arise.  Sometimes  an  anwer  can  be  found  by  sorting  the 
influences  on  die  quantity  into  positive  and  negative  sets  and  using  inequality  information  to  prove  diat  one 
set  of  influences  must,  taken  together,  be  larger  dian  the  other  set.  Of  course,  we  will  not  always  have  even 
diat  much  information. 

Resolving  an  indirectly  influenced  quantity  involves  gathering  die  oc^  statements  that  specify  it  as  a 
function  of  other  quantities.  Because  we  lack  detailed  information  about  the  form  of  the  function,  in  many 
eases  indirect  influences  cannot  be  resolved  within  basic  QP  theory.  An  example  will  make  diis  point  clearer. 
Suppose  we  have  a  quantity  Q0  such  that  in  a  particular  process  structure: 

Oq  Qj  A  Q0  aQ_  Qg 
If  we  also  know  that 

Ds[0il  -  l  A  ds[Q23  -  l 

then  we  cannot  determine  DS[Q0],  because  we  do  not  have  enough  information  to  determine  which  indirect 
influence  "dominates".  However,  if  we  had 

d.COi]  *  i  A  ds[Q2]  -  o 
then  we  can  conclude  that 


1.  I'll  is  can  require  searching  the  completions  of  the  relevant  quantity  spaces  if  the  required  orderings  cannot 
be  deduced  from  what  is  already  known  about  die  values. 
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DS[Q0]  •  l 

because  Qj  is  now  dm  only  active  indirect  influence. 

Importantly,  we  assume  the  collection  of  qualitative  proportionalities  which  hold  at  any  particular 
time  is  loop-free,  that  is.  if  a  oc^  b,  then  it  cannot  be  the  case  that  B  ccQ  a.  At  first  glance  it  might  seem  that 
this  assumption  makes  it  impossible  to  model  systems  where  twm  parameters  arc  interdependent,  such  as 
feedback  systems.  This  is  not  the  case:  die  key  observation  is  that,  in  physical  systems,  such  loops  always 
contain  a  derivative  -  which  is  modeled  hy  a  direct  influence,  not  a  qualitative  proportionality.  In  blinking 
about  fluid  flow,  for  example,  we  might  observe  dial  a  change  in  amount  of  liquid  causes  a  change  in  flow 
rate,  which  in  turn  acts  to  change  the  amount  of  liquid.  But  while  flow  rate  is  qualitatively  proportional  to  the 
amount  of  liquid  (via  its  dependence  on  pressure,  which  depends  on  die  level,  which  in  turn  depends  on  the 
amount  of  liquid),  die  flow  rate  is  a  direct  influence  on  the  amount  of  liquid.  The  integral  connection 
between  them  serves  to  "break"  die  loop,  duis  ensuring  the  system  of  qualitative  propotionaliucs  is  loop-free. 

Domain  specific  and  problem  specific  knowledge  often  plays  a  role  in  resolving  influences.  We  may 
know  drat  a  certain  influence  can  be  ignored,  such  as  when  we  ignore  heat  loss  from  a  kettle  on  a  stove  to  die 
air  surrounding  it.  Our  knowledge  about  particular  functions  may  tell  us  which  way  things  combine.  Suppose 
for  instance  that  our  model  of  fluid  flow  included  influences  to  model  the  changes  in  heat  and  temperature 
that  result  from  mass  transfer.  In  the  source  and  destination  temperature  would  be  indirectly  influenced  (via 
Amount-of  and  heat),  and  if  we  knew  nothing  but  the  ds  values  we  could  say  nodiing  about  how  they  will 
change,  l-'rom  Black's  law,  however,  we  know  diat  die  temperature  of  the  source  is  unchanged  and  the 
temperature  of  the  destination  will  rise  or  fall  according  to  whether  the  temperature  of  the  source  is  greater  or 
less  than  die  temperature  of  die  destination. 

3.6.4  Limit  analysis 

The  changes  in  a  situation  can  result  in  the  process  and  view  structures  dicmselvcs  changing. 
Determining  these  changes  and  changes  in  o$  values  is  called  limit  analysis.  Limit  analysis  is  carried  out  by 
using  the  current  os  values  and  quantity  spaces  to  determine  which  quantity  conditions  can  change. 

The  first  step  is  to  find  die  neighboring  points  within  the  quantity  spaces  of  each  changing  quantity. 
If  there  is  no  neighbor  in  some  direction,  then  a  change  in  that  direction  cannot  affect  anything.  'lTic  ordering 
between  each  neighbor  and  the  current  amount  of  the  quantity  can  be  combined  with  die  ds  values  of  each  to 
determine  if  the  relationship  will  change  (see  figure  12).  If  die  neighbor  is  a  limit  point,  some  processes  may 
end  there  and  others  begin.  Thus  die  set  of  possible  changes  in  orderings  involving  limit  points  determines 
the  ways  die  current  set  of  active  processes  might  change.1  The  set  of  single  changes  plus  consistent 
conjunctions  of  changes  (corresponding  to  simultaneous  changes)  forms  the  set  of  quantity  hypotheses  for  die 
current  situation.  A  quantity  hypodiesis  which  imposes  a  change  in  eidicr  die  view  or  process  structure  (as 
opposed  to  merely  indicating  a  change  in  a  ds  value)  will  be  called  a  limit  hypothesis. 


1.  This  assumes  that  rates  arc  not  infinitesimals,  so  that  if  a  quantity  is  "moving"  towards  some  point  in  its 
quantity  space  it  will  actually  reach  that  value  in  some  finite  lime.  'Ifiis  assumption  rules  out  a  simple  form  of 
Zeno's  paradox.  Note,  however,  that  relaxing  this  assumption  would  result  in  only  one  additional  state  in  die 
possibilities  returned  by  die  limit  analysis  --  that  die  current  state  never  changes. 
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Fiji.  12.  Linking  derivatives  with  inequalities 

This  table  summarizes  how  the  ordering  relationship  between  two  quantities  may  change  according  to  the 
sign  of  their  derivatives  over  some  interval. 


For  A  >  B; 


-1 

Ds[B] 

0  1 

1 

-1 

Nl 

1 

■ 

Ds[A] 

0 

> 

>  1 

■ 

1 

> 

>  1 

N2 

Nl: 

If 

«>«,[*]  > 

then 

■ 

>  otherwise 

N2: 

If 

Dm[A]  < 

DmCB] 

then 

■ 

>  otherwise 

For  A 

■  B; 

0s[8] 

1 

-1 

0  1 

1 

-1 

N3 

<  1 

< 

Ds[A] 

0 

> 

■  1 

< 

1 

> 

>  1 

N4 

N3 : 

If 

> 

°m[B] 

then 

<: 

If 

Dn,[A]  < 

DmCD 

then 

> 

If 

°m[A]  * 

DmfB] 

then 

■; 

N4: 

If 

DmCA]  > 

tUB] 

then 

>; 

If 

°.n[A]  < 

0mfB] 

then 

<•, 

If 

DmCA]  ' 

DmCB] 

then 

■; 

Determining  which  changes  and  conjunctions  of  changes  arc  consistent  involves  several  types  of 
knowledge.  First,  one  quantity  hypothesis  might  render  another  moot.  For  example,  if  a  particular  quantity 
hypothesis  causes  an  individual  to  vanish,  then  any  other  quantity  hypotheses  involving  that  individual  which 
are  to  occur  at  the  same  time  arc  irrelevant.  Secondly,  we  assume  that  changes  implied  by  a  quantity 
hypothesis  must  be  continuous  both  in  quantity  spaces  and  in  ds  values.  Continuous  in  quantity  spaces 
means  that  all  relationships  between  quantities  must  go  through  equality,  i.c.,  that  the  relationship  between  Nj 
and  n2  cannot  change  directly  from  >  to  <  or  from  <  to  >.  Continuous  in  Ds  values  means  a  Ds  value  cannot 
jump  directly  from  1  to  -1  or  from  -l  to  1.  Finally,  domain  dependent  information  can  be  used  to  determine 
that  the  situation  resulting  from  the  quantity  hypothesis  is  inconsistent.  For  example,  if  live  bottoms  of  two 
open  containers  arc  at  the  same  height  and  the  only  tiling  happening  is  a  fluid  flow  from  one  to  the  other, 
then  it  is  impossible  for  the  source  of  the  flow  to  run  out  of  liquid. 

More  titan  one  change  is  typically  possible,  as  Uie  examples  in  the  next  section  illustrate,  There  are 
three  reasons  for  this,  f  irst,  if  die  ordering  within  a  quantity  space  is  not  a  total  order  more  than  one 
neighbor  can  exist.  Second,  a  process  can  influence  more  than  one  quantity.  Finally  more  than  one  process 
can  be  occurring  simultaneously.  The  basic  theory  docs  not  in  general  allow  determining  which  alternative 
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actually  occurs.  The  hypothesis  which  occurs  represents  a  quantity  (or  collection  of  quantities)  th.it  rcachs  its 
limit  point  before  any  others  do.  Using  Calculus  as  the  model  for  quantities,  this  would  require  solving  an 
integral  equation.  Since  the  basic  theory  does  not  include  explicit  integrals,  this  question  typically  cannot  be 
decided. 

There  are  some  special  situations,  due  to  the  nature  of  quantities,  where  sometimes  we  can  do  better. 
Consider  two  quantities  a  and  8  that  arc  equal,  and  c  and  D  that  arc  unequal.  If  all  of  the  quantities  arc 
changing  (Ds  value  of  -l  or  1)  in  ways  that  insure  die  relationships  between  diem  w  ill  change,  dicn  die  finite 
difference  between  c  and  o  implies  that  the  change  in  die  equality  between  a  and  b  occurs  first,  in  fact,  we 
assume  diat  the  change  from  equality  occurs  in  an  instant,  while  die  change  to  equality  usually  will  takes  some 
interval  of  time.  We  further  assume  that  a  change  ty  equality  will  take  an  instant  only  when  die  change  in 
value  w  as  due  to  a  process  that  acted  only  for  an  instant.  These 
facts  arc  summarized  as  the  equality  change  law: 

With  two  exceptions,  a  slate  lasts  far  an  interval  of  time.  It  lasts  for  an  instant  only 
when  either 

( 1)  A  change  from  equality  occurs  or 

(2)  A  change  to  equality  occurs  between  quantities  that  were  influenced  away 
from  equality  for  only  an  instant. 

The  first  case  assumes  dial  die  values  of  numbers  aren’t  "fuzzy",  and  the  second  case  assumes  that  the 
changes  wrought  by  processes  arc  finite  (i.c.,  no  impulses). 

Remember  that  the  set  of  quantity  hypotheses  consists  of  single  changes  and  conjunctions  of  single 
changes.  Consider  the  set  of  conjunctive  hypotheses  which  contain  only  changes  diat  occur  in  an  instant,  and 
in  particular,  the  maximal  element  (in  terms  of  inclusion)  of  die  set.  The  quantity  hypotheses  diat  contain  this 
maximal  clement  are  the  ones  which  can  occur  next,  because  the  duration  of  an  instant  is  shorter  dian  the 
duration  of  an  interval.  By  using  the  equality  change  law  to  identify  those  quantity  hypotheses  that  represent 
changes  dial  occur  in  an  instant,  we  can  sometimes  get  a  unique  result  from  limit  analysis  within  the  basic 
theory. 

For  some  kinds  of  tasks  just  knowing  die  possible  changes  is  enough  (c.g.,  envisioning).  If  required, 
knowledge  outside  the  scope  of  QR  theory  can  be  used  to  disambiguate  utc  possibilities.  Depending  on  the 
domain  and  the  style  of  reasoning  to  be  performed  there  arc  several  choices:  simulation  [Forbus,  198 laj, 
algebraic  manipulation  [de  Klccr,  1975],  teleology  [dc  Klccr,  1979),  or  default  assumptions  or  observations 
[Forbus,  1983a], 

3.7  Processes  and  histories 

Adding  processes  to  the  ontology  of  naive  physics  requires  extending  the  history  representation  of 
change.  In  addition  to  parameter  histories,  we  w  ill  also  use  process  histories  to  describe  what  processes  arc 
occurring  when.  I  he  temporal  extent  of  a  process  episode  is  the  maximal  time  during  which  the  status  of  the 
instance  is  constant,  and  the  spatial  extent  is  the  spatial  extent  of  the  individuals  involved  in  it.  The  events 
dial  bound  episodes  in  die  process  history  occur  at  the  instants  at  which  quantity  conditions,  preconditions,  or 
die  existence  of  objects  involved  in  the  instance  change.  F/cw  histories,  describing  the  status  of  view 
instances,  arc  defined  similarly.  Process  and  view  episodes  are  included  in  the  histories  of  the  objects  diat 
participate  in  the  process,  and  die  union  of  the  object's  parameter  histories  and  the  history  of  die  processes 
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and  views  it  participates  in  comprise  its  tout  history.  Figure  13  illustrates  the  full  history  over  a  small  interval 
for  the  ball  being  dropped  through  a  flame  discussed  previously. 

As  mentioned  previously,  the  two  key  problems  in  reasoning  with  histories  arc  tine  local  evolution 
problem  (extending  the  known  portion  of  an  object's  history,  preferably  by  carving  up  the  situation  into 
pieces  that  can  be  reasoned  about  semi-independently)  and  live  intersection/ interaction  problem.  The  key  to 
solving  them  lies  in  having  explicit  descriptions  of  the  ways  changes  are  caused. 

Recall  tli.it  the  processes  active  in  a  situation  form  its  process  structure  (as  usual,  we  also  implicitly 
include  the  view  structure  to  simplify  discussion).  Processes  interact  by  shared  influences;  two  processes 
which  affect  die  same  parameter  or  a  process  that  affects  a  parameter  mentioned  in  the  quantity  conditions  of 
another  must  be  considered  together  when  figuring  out  if,  and  how,  they  will  change.  If  there  is  no  way  for 
two  processes  to  "communicate"  by  common  effects,  then  they  can  be  considered  independently.  ITiis 
suggests  carv  ing  up  what  is  happening  at  a  particular  time  into  "non-overlapping"  pieces,  subsets  of  the 
process  structure  that  do  not  interact. 

We  define  / ^components  as  equivalence  classes  on  the  process  structure  as  follows.  A  process 
instance  pi  (or  view  instance)  is  in  die  same  p-component  as  another  process  instance  P2  (or  view  instance)  if 
cither:  (a)  pi  influences  a  quantity  mentioned  in  P2’s  quantity  conditions,  (b)  pi  influences  a  quantity 
influenced  by  P2,  (c)  pi's  quantity  conditions  mention  a  quantity  mentioned  in  die  quantity  conditions  of  P2, 
or  (d)  P2  contains  a  «  th.it  propagates  an  influence  of  Pi. 

As  long  as  a  particular  process  structure  lasts,  the  p-componcnts  can  be  reasoned  about 
independently.  For  example,  we  usually  don’t  worry  about  getting  our  feet  wet  in  a  basement  despite  the 
proximity  of  flowing  water  and  steam  in  our  plumbing.  Changes  in  die  process  structure  can  bring  about 
changes  in  p-componcnts,  so  the  conclusions  made  in  each  p-componcnt  may  have  to  be  modified  depending 
on  how  the  process  structure  changes.  If  our  plumbing  leaks,  for  instance,  there  arc  now  ways  for  our  feet  to 
get  wet. 

The  individuals  affected  by  die  processes  in  each  p-componcnt  define  a  collection  of  things  diat  can 
be  reasoned  about  in  isolation,  barring  certain  changes  in  process  structure.  Thus  we  can  generate  object 
histories  by  evolving  situations  diat  correspond  to  p-componcnts,  combining  the  results  when  the  process 
structure  changes  to  get  new  p-componcnts,  and  so  forth.  The  interaction  problem  becomes  trivial  -  two 
episodes  interact  if  and  only  if  the  processes  diat  give  rise  to  diem  arc  part  of  the  same  p-componcnt  of  a 
process  structure  on  a  situation  made  up  of  slices  from  those  particular  episodes.  Figure  14  provides  a 
graphical  illustration. 
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Fig.  13.  I  listorv  for  a  hall  dropping  through  a  flame 

Here  is  a  piece  of  the  history  for  the  ball  again,  but  with  process  episodes  added.  As  before.  EP<n>  arc 
episodes,  and  time  runs  from  top  to  bottom. 


History(B) 


Temperature(B) 


Position(B) 


Process  episodes 
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Fig.  14.  Determining  interactions 

Suppose  wa  and  W8  arc  liquids,  with  we  being  die  fluid  flowing  through  die  channel  below  wa's  container. 
Below  are  die  process  structures  that  result  from  different  assumptions  about  the  situation,  with  potential 
interactions  indicated. 


If  the  shared  wall  is  not  a  heat  path, 

PS:  Fluid-Flow(W8,  channel),  no  interaction 
Otherwise,  if  A[tenperature(WA) ]  ■  A[temperature(WB)] 

PS:  Muio-Flow(W8.  channel),  no  interaction 

Otherwise,  PS:  F 1 u id-Flow( WB ,  channel)  and  a  heat  flow,  hence  they  interact. 


3.8  A  language  for  behavior 

QP  theory  concerns  the  structure  of  qualitative  dynamics.  It  specifies  a  language  in  which  certain 
common  sense  physical  models  can  be  written.  Can  this  language  be  extended  to  form  a  full  language  of 
behavior  for  physical  systems?  Aldiough  I  have  not  yet  done  so,  I  will  argue  that  die  answer  is  yes,  and  that 
several  advantages  would  result  from  the  extension. 

A  language  should  have  primiuves.  some  means  of  combining  these  primitives,  and  means  of 
abstraction  to  allow  new  cnutics  to  be  defined.  Processes  and  individual  views  arc  the  primitives  in  this 
language.1  There  arc  two  sensible  Kinds  of  compound  processes.  The  first  kind  consists  of  processes  dial 
form  a  p-componcnt.  a  shared  parameter  combination.  An  example  of  a  shared  parameter  combination  is  the 
intake  stroke  of  a  four  cycle  engine,  which  consists  of  a  flow  of  air  and  gas  into  a  cylinder  and  motion  of  die 
piston.  The  second  kind  consists  of  sequences  of  processes  occurring  over  the  same  individuals.  An  example 
of  a  sequential  combination  is  the  sequence  of  intake,  compression,  combustion  and  exhaust  strokes  of  a 
four-cycle  engine.  Treating  these  combinations  as  new  "things"  then  allows  properties  of  the  system  they 
describe  to  be  reasoned  about. 


1.  The  choice  of  what  is  primitive  in  any  particular  domain's  vocabulary  will  of  course  vary'  -  for  example,  the 
description  of  a  gas  wc  use  in  section  4.1  is  macroscopic.  Presumably  a  richer  process  vocabulary  would 
contain  die  "mechanisms"  dial  induce  these  icladons  (i.c..  die  kinetic  dicory  of  eases),  but  there  is  no  reason 
to  always  include  such  detail.  Consider  for  example  a  resistor  in  a  circuit  dial  never  exceeds  its  electrical 
capacity.  The  detailed  mechanics  of  conduction  hinder  radicr  dian  help  when  calculating  the  current  that  will 
result  from  a  voltage  across  it. 
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It  should  be  clear  that  the  shared  parameter  combination  can  be  treated  exactly  as  a  simple  process, 
specified  by  the  union  of  the  properties  of  the  component  processes.  In  other  words,  a  shared  parameter 
combination  will  has e  individuals,  preconditions,  quantity  conditions,  relations,  and  influences  that  work  just 
like  any  other  process.  However,  the  sequential  combination  is  not  a  process,  because  die  same  influences 
and  relations  do  not  hold  over  every  distinct  time  within  the  occurrences  of  die  sequential  combination.  A 
sequential  combination  is  really  a  piece  of  a  history !  In  particular,  it  is  die  history  of  the  individuals  affected 
by  the  processes,  viewed  as  a  system.  In  honor  of  this  mixed  ontological  status  such  descriptions  will  be  called 
encapsulated  histories.  Hncapsulatcd  histories  (abreviated  KH)  arc  important  for  two  reasons.  First,  some 
phenomena  w  hich  can  be  described  by  them  seem  irreducible  in  terms  of  processes  --  collisions,  for  example. 
Second,  they  serve  as  abstract  descriptions  for  more  complex  behavior,  e.g.  in  describing  the  pattern  of 
activity  in  an  oscillator. 

When  writing  encapsulated  histories,  we  will  use  most  of  the  syntactic  structure  of  processes  and 
individual  views,  in  that  die  combination  will  have  individuals,  preconditions,  and  quantity  conditions. 
However,  the  relations  component  is  restricted  to  holding  a  description  of  a  piece  of  the  history  for  the 
individuals,  and  the  preconditions  and  quantity  conditions  are  written  relative  to  episodes  in  that  piece  of 
history  .  If  the  preconditions  and  quantity  conditions  arc  ever  true  for  a  partial  history  of  a  collection  of 
objects  matching  the  individual  specifications,  dten  the  schematic  history  described  in  its  relations  is 
instantiated  as  part  of  die  history  of  those  objects.1  We  will  see  collisions  described  as  an  encapsulated  history 
in  section  4.3. 

For  those  phenomena  which  arc  irreducible,  the  encapsulated  history  may  be  die  only  way  to  evolve 
die  history  of  the  object  past  diat  point.  For  systems  w  here  die  encapsulated  history  serves  as  a  summary,  an 
interesting  kind  of  perturbation  analysis  becomes  possible.  In  performing  an  energy  analysis,  for  example,  the 
quantity  conditions  arc  re-written  in  terms  of  energy.  Changes  to  die  system,  such  as  adding  friction,  are 
modeled  by  processes  that  influence  energy,  and  the  effects  of  these  changes  arc  determined  by  examining  the 
episodes  that  comprise  die  encapsulated  history  (sec  section  4.5.1). 

3.9  Classification  and  abstraction 

A  classification  hierarchy  is  needed  to  account  for  the  various  kinds  of  conditions  under  which 
processes  occur.  For  example.  Hayes  [1979b]  identifies  several  distinct  conditions  under  which  fluid  flow 
occurs.  Another  example  is  the  process  of  motion  -  flying,  sliding,  swinging,  and  rolling  are  distinct  types  of 
motion,  despite  sharing  certain  common  features.  Sliding  and  rolling  arc  examples  of  motion  along  a  surface, 
and  along  with  swinging  comprise  the  motions  inv  olving  constant  contact  with  another  object.  Fach  of  these 
conditions  has  slightly  different  properties,  but  dicy  arc  sufficiently  similar  in  die  individuals  they  involve  and 
the  pattern  of  influences  they  engender  to  be  considered  the  same  kind  of  process.  Having  explicit  abstract 
descriptions  of  processes  should  also  be  useful  because  dicy  are  often  easier  to  rule  out  than  more  detailed 
descriptions.  If.  for  instance,  there  is  no  path  between  two  places  dirough  which  an  object  can  be  moved,  it 


1.  Many  of  diSessa’s  "phenomenological  primitives"  [diScssa,  1983]  appear  to  be  representable  as 
encapsulated  histories.  Hncapsulatcd  histories  are  also  good  candidates  for  the  first  models  people  make  of  a 
new  domain  [Forbus&  Gcntncr,  1983). 
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cannot  get  there  by  sliding,  (lying,  rolling,  or  .my  other  kind  of  motion  that  might  exist. 

Theoretically,  disjunctions  could  be  used  within  u  single  process  description  to  cover  the  various 
cases.  Doing  so  would  lead  us  complicated  descriptions  that  could  not  easily  be  reasoned  about.  Instead, 
every  case  will  he  represented  by  a  different  process.  We  will  say  that  PI  is  a  case  of  P2,  such  as: 

Case-of ( Swi ng i ng .  Motion) 

1  he  following  restrictions  hold  on  cases: 

Specificity:  There  is  a  subset  of  the  individuals  specified  for  PI  such  that  they  or 
individuals  whose  existence  is  implied  by  them  match  the  individual  specifications 
of  P2.  The  preconditions  and  quantity  conditions  for  PI  imply  the  preconditions 
and  quantity  conditions  for  P2  respectively. 

Inheritance:  All  statements  in  the  relations  and  influences  fields  of  P2  hold  for  PI 
unless  explicitly  excluded. 

Figure  15  illustrates  some  specializations  of  die  abstract  motion  process  that  will  be  discussed  in  section  5.3. 


Fig.  15.  Some  specialized  descriptions  of  motion 

Cases  of  motion  arc  organized  around  constraints  on  kinematics.  The  abstract  motion  process  already 
includes  the  individuals  b,  a  movable  object,  and  dir,  a  direction.  This  process  will  be  explained  in  section 
4.3.  In  sliding  and  rolling  there  is  contact  with  a  surface,  but  different  constraints  on  tire  kind  of  contact 
Otherwise  die  same  facts  pertain  to  diem  as  to  the  abstract  version  of  motion. 


Process  Motion(B , dir) 

individuals : 

B  an  object,  Mobile(B) 
dir  a  direction 

Preconditions: 

Free-direction(B,  dir) 
Oirection-Of (dir,  velocity(B)) 

Quant ityCondlt ions: 

Am[velocity(B)]  >  ZERO 

Influences: 

I+(position(B) ,  A[velocity(B))) 


Process  Slide 

Case-of:  Motion 

Individual s : 

S  a  surface 

Preconditions: 

SI iding-Contact(B,  S) 
Along-Surface(dir,  B,  S) 


Process  Roll 

Case-of:  Motion 

Individuals: 

S  a  surface 

Preconditions : 

Contact(B,  S) 

Round(B) 

Along-Surface(dir,  B,  S) 
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4.  Kxumplcs 

At  this  point  a  great  deal  of  representational  machinery  has  been  introduced.  It  is  time  to  illustrate 
how  QP  theory  can  be  used  in  physical  reasoning.  The  examples  are  fairly  informal  for  two  reasons.  First,  die 
formali/ation  of  the  domains  is  still  underway.1  Second,  while  Qualitative  Process  theory  provides  an 
important  part  of  any  domain's  theory,  a  complete  model  usually  has  to  address  several  considerations  besides 
dynamics,  such  as  spatial  reasoning  (qualitative  kinematics,  as  it  were).  Still,  these  examples  arc  complex 
enough  to  provide  an  indication  of  the  theory's  utility.  The  assumptions  about  other  kinds  of  knowledge 
required  arc  noted  as  they  occur. 

4.1  Modeling  fluids  and  liquid  flow 

This  example  illustrates  some  of  the  basic  deductions  sanctioned  by  Qualitative  Process  theory  and 
introduces  the  representations  of  fluids  used  in  other  examples.  (These  representations  arc  slightly  more 
complex  than  the  contained  liquid  description  we  have  been  using.)  Consider  the  two  containers  illustrated  in 
figure  16.  What  wil'  happen  here? 

We  first  introduce  descriptions  of  the  fluids.  Following  Haycs[1979b],  we  individuate  liquids 
according  to  w  hat  contains  them.  F  igure  17  describes  "pieces  of  stuff",  and  Figure  18  describes  a  particular 
class  of  pieces  of  stuff  that  arc  indiv  iduated  by  being  inside  a  container.  Any  piece  of  stuff  must  be  in  some 
state,  either  solid,  liquid,  or  gas.  Figure  19  describes  the  suites  of  substances,  The  interaction  of  suite  and 
containment  is  described  in  figure  20.  Since  initially  there  is  some  water  in  the  containers,  we  will  create 
indiv  iduals  corresponding  to  the  water  in  each  container.  Call  ihe  pieces  of  stuff  in  containers  C  and  o  we  and 
wo  respectively.  We  will  assume  their  temperatures  are  such  dial  they  arc  both  liquids.  For  simplicity  we  will 
ignore  the  liquid  in  the  pipe  pi.  We  will  also  ignore  the  precise  definition  of  fluid  paths,  except  to  note  diat 
pi  is  one,  connecting  the  two  contained  fluids. 

Suppose  our  process  vocabulary  consists  of  liquid  flow,  w'hosc  description  is  illustrated  in  figure  21. 
This  model  is  very  simple,  because  it  ignores  the  possibility  of  different  kinds  of  fluids  and  die  details  of  how 
fluids  move  dirough  the  fluid  paths  ({Hayes,  1979bJ  illustrates  some  of  the  distinctions  diat  should  be  drawn 
in  a  more  detailed  model). 

With  the  situation  we  have  so  far.  there  arc  two  process  insUinccs,  one  corresponding  to  flow  from  we 
to  wd  and  die  other  corresponding  to  flow  from  wo  to  we.  To  determine  if  either  is  active  (thus  determining  the 
process  structure)  we  have  to  know  the  relative  pressures  of  we  and  wd.  Assume  we  deduce  from  die  relative 
levels  that  the  pressure  of  we  is  greater  than  the  pressure  of  wd.  Then  the  process  instance  representing  fluid 
flow  from  we  to  wo  will  be  active  and  the  process  instance  representing  fluid  flow  from  wo  to  we  will  be 
inactive.  Huts  die  process  structure  is  die  set  consisting  of 


1.  At  present  work  is  focusing  on  two  domains:  the  mechanism  world,  and  the  fluids  world.  ITic  mechanism 
world  includes  the  blocks  world  but  also  more  complex  shapes  and  some  non-rigid  materials.  The  aim  of 
work  in  the  mechanism  world  is  to  understand  devices  such  as  mechanical  watches  and  automobile 
transmissions.  I  he  fluids  world  is  an  attempt  to  extend  [(ayes'  theory  of  liquids  to  include  gases  and  more 
complex  fluid  systems  such  as  found  in  steam  plants. 
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Kiy.  16.  Two  partially  filled  containers 

Containers  C  and  D  arc  connected  by  a  pipe.  C  contains  more  water  than  D.  In  general  an  "-in"  suffix 
indicates  a  function  that  maps  from  a  container  and  a  substance  to  a  quantity. 


istructural  description 

Open-Container(C) 

Open-Container(D) 

Fluid-Path(Pl) 

Fluid-Connectad(C,  0.  PI) 

; the  containers  can  hold  water 
Can-Contain-Substance(C.  water) 

Can-Contain-Substance(D,  water) 

; the  levels  are  related 

(M  A[1 evel - in( C .  water)]  Initial)  >  (M  A[level-1n(D,  water)]  Initial) 


Fig.  17.  Pieces  of  stuff 

A  piece  of  stuff  has  several  quantities,  a  substance,  and  a  location. 

(V  p  €  piece-of-stuff 

Has-Quantity(p,  amount-of) 

A  Has-Quantity(p,  volume)  A  Has-Quantity(p,  pressure) 
A  Has-Quanti ty ( p .  temperature)  A  Has-Quantity(p,  heat) 
A  Substance(made-of  ( p ) )  A  PI ace( 1 ocation(  p) ) 

A  tenperature(p)  heat(p) 


Liquid-Flow(WC,  WO.  PI). 

To  find  out  what  changes  are  occurring  wc  must  resolve  the  influences.  In  this  situation  resolving 
influences  is  simple.  The  fluid  flow  from  c  to  o  is  die  only  cause  of  direct  influences,  changing  amount-of  for 

wc  and  wo.  Each  of  them  has  only  one  influence,  hence 

Ds[amount-of (WC)]  •  -1 

and 

Ds[amount-of (WO)]  •  1 

These  in  turn  influence  volume,  level  and  pressure,  each  of  which  has  only  one  applicable!  see  figure  20). 


i 


1'orbus 


•48" 


Ql*  theory 


Tig.  18.  Contained  stuff 

Contained-stuff  describes  the  conditions  under  which  pieces  '  r  -jff  exist  inside  a  container. 

Ind i v idua1 -Vi ew  Contained-Stuff 

Individual s : 

c  a  container 
s  a  substance 

Preconditions: 

Can-Contain-Substance( c .  s) 

QuantityConditions: 

A[amount-of-in(c,  s)]  >  ZERO 

Relations : 

There  is  p  €  oiece-of-stuff 
amount-of- in( c ,  s)  *  amount-of (p) 
s  *  made-of(p) 
inside(c)  -  location(p) 


Thus  we  can  deduce  that  the  volume,  level  and  pressure  of  wc  arc  all  decreasing,  and  die  volume,  level  and 
pressure  of  wo  arc  all  increasing.  All  other  quantities  are  uninfluenced,  hence  unchanging.  Limit  analysis  is 
similarly  simple.  The  pressures  will  eventually  be  equal,  which  means  the  fluid  flow  will  stop.  It  is  also 
possible  that  the  container  c  will  run  out  of  water,  thus  ending  wc’s  existence  (although  it  is  not  possible  in  the 
particular  drawing  shown).  These  results  arc  summarized  in  figure  22.  This  graph  of  process  structures  can 
be  used  to  generate  a  history  by  first  creating  the  appropriate  episodes  for  objee  and  processes  from  their 
initial  slices,  and  then  selecting  one  or  the  other  limit  hypothesis  as  the  end  event  for  that  episode.  Usually  we 
will  just  represent  the  interconnections  between  possible  process  structures  as  wc  have  done  here.  With  only  a 
single  process  and  simple  relationships  between  quantities,  resolving  influences  and  performing  limit  analysis 
is  simple.  In  more  complex  situations  resolving  influences  and  disambiguating  the  possibilities  raised  by  limit 
analysis  will  require  more  information,  as  wc  will  see  below. 
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fig.  19.  States  of  matter 

I  he  temperatures  at  which  state  changes  occur  arc  modeled  by  two  functions  t-neit  and  t-boii.  t-meit  and 
t  -  Bo  i  t  map  pieces  of  stuff  onto  quantities,  and  we  assume  A[t-boii]  is  never  less  than  A[t-neit].  Hie 
quantity  conditions  express  the  fact  that  a  substance  can  be  in  either  state  at  a  phase  boundary,  but  that  a 
particular  piece  cannot  be  in  both  states  at  once.  To  determine  the  state  of  a  piece  of  stuff  at  the  phase 
boundary  requires  cither  know  ing  its  history  or  making  an  assumption. 


Individual-View  Solid(p) 

Individual s : 

p  a  piece-of-stuff 


Individual-View  Liquid(p) 

Individuals : 

p  a  piece-of-stuff 


Quant  i  tyCondi tions :  Quant i tyCondi t ions : 

~ 1  A[ temperatu re{ p ) ]  >  A[t-melt(p)]  ~ 1  Af temperature( p ) ]  <  A[t-melt(p)] 

Liquid(p)  ~ 1  A[temperature(p)]  >  A[t-boil(p)] 

->  Solid(p) 

->  Gas(p) 

Rel ations : 

volume(p)  0Cq+  amount-of (p ) 
t-boil(p)  oCq+  pressure(p) 


Individual -View  Gas(p) 

Individual s : 

p  a  piece-of-stuff 

Quant i tyCondi tions: 

-v  A[  temper  a  tu  re  ( p)  ]  <  A[t-boi7(p)] 
Liquid(p) 


Relations : 

temperature(p)  “q+  pressure(p) 
pressure(p)  0Cq+  amount-of ( p ) 
pressure(p)  aQ-  volume(p) 
pressure(p)  “Q+  heat(p) 

:Instead  of  writing  a  constraint  law,  we  use  qualitative  proportionalities 
; to  preserve  the  direction  of  physical  effect.  The  section  on  Causal 
reasoning  explains  why. 
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lig.  20.  K.fTccts  of  state  on  containment 

Contained  stuff  has  states  as  well  - 
( V  p  €  piece-of-stuff 

(Contamed-Gas(p)  «-*  ( Con ta ined-Stuf f ( p )  A  Gas(p))) 

A  (Contained-Liquid(p)  «-»  ( Con tained-S tuf f ( p )  A  Liquid(p))) 
A  (Contained-Sol id(p)  *-»  ( Con ta  1  ned-Stuf f ( p )  A  Solid(p)))) 

Contained  liquids  have  levels,  which  are  tied  to  amounts 
.and  in  turn  (assuming  an  open  container)  determines  pressure 

( tf  c  C  contained-1  iauid 

Has-Quantity(c,  level) 

A  level(c)  cCq+  amount-of { c) 

A  Function-Spec(p-l-fun,  (pressure(c)  ocq+  level(c)})) 


Kig.  21.  A  process  description  of  fluid  flow 

This  simple  model  docs  not  describe  die  existence  and  behavior  of  the  liquid  within  the  fluid  path. 


process  liquid-flow 


Individuals : 

sre  a  contained-! iquid 
dst  a  contained-1 iquid 

path  a  fluid  path.  Fluid-Connected(src,  dst,  path) 

Preconditions: 

A1 igned(path) 


Quanti ty condi  t ions : 

A[pressure(src)]  >  A[pres sure( dst) ] 


Relations: 

Let  flow-rate  be  a  quantity 

flow-rate  «q+  (A[pressure(src)]  -  A[pressure(dst)]) 
Influences : 

I*(amount-of(dst) .  A[ f 1 ow-rate]) 

I- ( amount-of ( sre) ,  A[f low-rate]) 


; A  fluid  path  is  aligned  if  only  if  either  it  has  no  valves  or  every  valve  is  open 
(V  p  C  flu  id-oath 

(( number -of -val ves( p )  ■  0)  =>  Aligned(p)) 

A  ( (numner-of-valves(p)  >  0)  =>  (V  v  6  valves(p)  Open(v))  *♦  Aligned(p)) 
A  -i  (number-of-valves(p)  <  0)) 
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l  ie.  22.  Resolved  influences  and  limit  analysis 

1  ho  results  of  resolving  influences  and  limit  analysis  for  the  situation  involving  two  containers  are 
summarized  below.  The  individuals  in  the  situation  arc  labeled  is,  the  Process  Structure  by  PS,  and  limit 
hypotheses  by  lh. 


Changing  Ds  values: 

Ds[amount-of(WC)]  -  -1 
0$[ vol ume( WC ) ]  •  -1 
0$[ 1 evel (WC)  ]  «  -1 
Os[pressura(WC)  ]  ■  -1 
Os[heat(WC)]  •  0 
Ds[temperature(WC)]  • 

limit  analysis: 


Djfamoun t-of ( WD) ]  •  1 
Ds[volume(WD)]  *  1 
Ds[level(WD)]  ■  1 
Ds[pressure(WO)]  •  1 
Os[heat(WO) ]  -  0 
Ds[temperature(WO)]  - 


IS:  {WC.  WO} 

PS:  {L iqu id-Pl 0w( WC  .  WD,  PI)} 

Z"  "s, 

LH:  A[pressure(WC)]  •  A[ pressure(WO) ] 

IS:  {WC.  WD} 

PS:  {} 


LH:  A[ amount-of (WC) ] 
IS:  {WD} 

PS:  {} 


•  ZERO 


4.2  Modeling  a  boiler 

Let  us  consider  the  possible  consequences  of  the  situation  shown  in  figure  23.  The  situation  consists 
of  a  container  parually  filled  with  water.  Initially  the  lid  of  the  container  is  open;  we  stipulate  that  if  boiling 
ever  occurs,  the  lid  will  be  closed  and  scaled.  A  flame,  modeled  as  a  temperature  source,  is  placed  so  that  heat 
can  be  conducted  to  tile  container  and  water  (i.c.,  there  is  an  aligned  heat  path  between  diem).  What  sorts  of 
Jungs  can  happen? 

To  begin  with,  we  need  the  contained  substances  defined  in  die  previous  example  and  a  model  of 
containers.  We  assume  diat  if  the  pressure  inside  the  container  exceeds  a  particular  pressure  p-purst(CAN), 
die  container  will  explode.  Figure  24  describes  the  container  model.  We  assume  that,  in  addition  to  liquid 
flow,  the  process  vocabulary  includes  heat  flow  and  boiling,  as  presented  in  section  3.1.  We  ignore  the  rest  of 
the  details,  such  as  the  nature  of  heat  and  fluid  paths  and  die  detailed  geometry  of  containers. 

We  start  by  assuming  that  no  processes  arc  active  before  the  heat  source  is  turned  on;  in  other  words 
that  all  temperatures,  pressures,  etc.  arc  equal  so  dicre  arc  no  flows,  and  that  die  temperatures  arc  in  die 
appropriate  regions  of  their  quantity  spaces  so  diat  no  state  changes  arc  occurring.  (Note  diat,  as  usual,  we  arc 
making  a  closed  world  assumption  both  in  assuming  our  process  vocabulary  is  complete  and  that  wc  know  all 
of  die  relevant  individuals).  Since  dicre  is  a  heat  padi  between  the  source  and  the  container,  if  we  turn  the 
heat  source  on  and  if 

A[ temoerature( SOURCE ) ]  >  A[ tenperatur8( WATER ) ] 
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Fig.  23.  A  simple  boiler 


Lid 


Water 

Container 

Flame 


Temperature  source 


there  is  a  heat  flow  from  the  source  to  the  water.  We  ignore  the  influence  of  the  heat  flow  on  the  source  by 
assuming 

0S[ temperature (SOURCE ) J  •  0 

The  only  influence  on  temperature(CAN)  is  that  of  the  heat  flow,  so 

Os[temperature(CAN)]  •  1 

This  in  turn  causes  a  heat  flow  to  the  air  surrounding  the  container  and  to  the  air  and  the  water  inside  the 
container.  Since  we  arc  only  thinking  about  the  container  and  its  contents  most  of  these  changes  will  be 
ignored,  and  from  now  on  when  we  refer  to  heat  flow  it  will  be  the  flow  from  the  flame  to  the  contained  stuff, 
using  the  container  as  the  heat  path.  The  temperature  quantity  space  that  results  is  illustrated  in  figure  25.  If 
a[  temper  a  ture(  source)  ]  >  A[t-boii(water)]  and  the  process  is  unimpeded  (i.e.,  die  preconditions  for  the 
heat  flow  remain  true),  the  next  process  structure  to  occur  will  include  a  boiling. 

Suppose  the  preconditions  for  the  heat  flow  continue  to  be  met  and  boiling  occurs.  Then  by  our 
initial  assumptions  the  lid  will  be  scaled,  closing  all  fluid  paths  and  thus  preventing  any  flows.  The  amount-of 
quantity  spaces  that  result  arc  illustrated  in  figure  26.  The  influence  of  the  boiling  on  amount-of(WATER) 
moves  it  towards  zero.  So  one  of  the  ways  the  process  structure  might  change  is  that  all  of  the  water  is 
converted  to  steam. 

If  all  the  water  is  converted  to  steam,  die  only  active  process  is  a  heat  flow  from  die  heat  source  to 
die  steam.  Thus  die  sole  influence  on  the  heat  of  die  steam  is  positive,  and  (because  of  oc^)  the  temperature 
also  rises.  Heat  indirectly  influences  pressure,  so  the  pressure  of  die  steam  will  also  rise.  By  examining  the 
quantity  spaces  for  temperature  and  pressure  wc  find  dierc  arc  two  limit  points  which  may  be  reached, 
namely  that  the  temperature  of  die  steam  can  reach  the  temperature  of  die  heat  sotircc  and  dial  die  pressure 
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lig.  24.  A  simple  container  model 

For  simplicity  we  will  model  a  container  only  as  a  collection  of  quantities,  a  set  of  pieces  of  stuff  which  arc  its 
contents,  and  an  encapsulated  history  to  describe  the  possibility  of  it  exploding.  The  geometric  information 
necessary  to  determine  (low  padis  and  the  spatial  arrangement  of  the  contents  will  be  ignored. 

V  c  £  container 

[Has-Quanti ty( c ,  volume)  A  Has-Quan t i ty( c ,  pressure) 

A  Has-Quant  i  ty ( c  ,  temperature)  A  Has -Quant i ty( c .  heat) 

A  (Rigid(c)  =»  Ds[volume(c)]  *  0) 

A  —I  Open-Container(c)  => 

(V  p  £  contents(c) 

pressure(c)  *  pressure(p) 

A  temperature(c)  ■  temperature(p))] 

;note  we  are  assuming  instantaneous  equilibration 
;  within  the  container 

Encapsulated  History  Explode 

Individuals: 

c  a  container,  rigid(c) 
e  an  episode 

Preconditions: 

(T  -i  Open-Contalner(c)  e) 

Quant ityCand it  ions: 

(M  A[pressure( c)  end(e))  «  (M  A[p-bur s t( c ) ]  end(e)) 

(M  A[pressure( c)  during(e))  <  (M  A[p-burst(c)]  during(e)) 

Relations: 

Let  EV1  be  an  event 
end(e)  »  EV1 
Terminates(c,  EV1) 

jTerminates  indicates  that  the  abject  does  not  exist  past 
;that  particular  event 


of  the  contiiincr  (which  is  equal  to  the  pressure  of  the  steam)  can  reach  the  explosion  point.  In  the  first  case 
there  are  no  active  processes,  and  in  the  second  an  explosion  occurs.  We  have  found  one  possible  disaster,  are 
tli ere  more?  To  find  out,  we  must  go  back  to  the  boiling  episode  and  check  the  indirect  consequences  of  the 
changes  in  amount-of  (STEAM). 

Consider  sonic  arbitrary  instant  I  within  the  boiling  episode.  Because  the  steam  is  still  in  contact 
with  the  water  their  temperatures  will  be  the  same.  Since  we  assumed  the  container  would  be  scaled  when 
boiling  began,  there  arc  no  fluid  paths  hence  no  fluid  flows.  Therefore  during  I  the  only  influence  on 
amount-of  (steam)  and  on  amount-of  (water)  is  from  boiling.  So  Ds[amount-of  (STEAM)]-i  and 
Ds[ amoun  t-o  f (WATER)]*-1. 

Because  steam  is  a  gas,  there  arc  several  indirect  influences  on  temperature(STEAM)  and 
pressure(STEAM)  (sec  figure  19).  In  particular, 
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Fiy.  25.  Quantity  space  for  water  temperature 

T  he  heat  flow  is  increasing  the  heal,  and  thus  (via  “g+)  :,.w  temperature  of  the  water.  The  lack  of  ordering 
information  between  the  temperature  of  the  source  and  the  boiling  temperature  leads  to  uncertainty  about 
what  will  occur  next. 


A[t-inclt(W/\TF.R)l 


---)  Aftcnipcratu re(  W  ATFR )] - 


— )  A[lcinpcratuio(SOURCF)) 


— )  A[t-boil(WATF.R)] 


Fig.  26.  amount-of  quantity  spaces 


7.F.RO - -)  A(amoum-on[ WATFR)] 

/.FRO  -  —  Afamoun t-oRS'l  1  -A M )J 


temperature(STEAM)  cCg^.  pressure(STEAM) 
temperature ( STEAM)  otg*  heat(STEAM) 
pressure! STEAM)  erg*  amount-of { STEAM) 
pressure( STEAM)  atg_  »ol ume( STEAM) 
pressure!  STEAM)  ctg^  heat(STEAM) 

Assuming  the  container  is  rigid,  o  [voiume(CAN)  ]-o,  and  since  the  spaces  of  the  steam  and  water  arc  separate 
and  fill  die  container, 

volume(CAN)  •  vol ume( WATER )  +  vol ume{ STEAM) 

Since  0  [ vo 1 ume( WATER ) )«-l.  D$[ vol ume( STEAM )]• 1  and  Dm[ vol ume( STEAM) ]*Dm[ vol ume( WATER ) ]. 

Assume  the  function  that  determines  pressure(  STEAM)  is  continuous  in  amount-of  (STEAM!, 
neat(STEAM).  and  voiume(STEAM).  Then  any  particular  Dfamount-oflSTEAM)]  and  D[beat(STEAM)],  we  can 
find  a  corresponding  o[voiume(STEAM)]  such  that 
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(M  Ds[pressure(STEAM)]  I)  *  0 

i.c..  the  pressure  at  the  end  of  i  will  be  die  same  as  it  was  at  the  start  of  i.  I.ct  /?  stand  for  that  value  of 
D[ vol ume( STEAM)  ].  lhcn 

(M  A[volume(STEAM)]  end(I))  ■  (M  A[vol ume(STEAM)]  start(l))  +  /3 
is  necessary  for  os[pressure(STEAM)]  to  be  zero.  A  fact  about  steam  is  that,  at  any  particular  pressure  and 
temperature,  tire  volume  of  steam  is  very  much  greater  than  the  volume  of  water  it  was  produced  from.1  In 
other  words, 

Ds[pressure( STEAM) ] =0  =>  Dm[vol ume( WATER) ]<<Dn[ vol ume(STEAM) ]. 

But  in  fact, 

0m[ vol  ume(  STEAM)  ]  =  Dm[  vol  line  (WATER  )  ],  SO  D[vo1  ume(  STEAM)  ]<  ft. 

This  means  that  (m  A[voiume( steam)]  end(i))  will  be  less  than 

(M  A[vol ume( STEAM) ]  start(I))  +  /?, 

and  because 

pressure(STEAM)  ocg_  vol ume(STEAM) , 

the  pressure  of  the  steam  will  be  greater  than  it  was,  i.e., 

Ds[p res sure( STEAM) ]«1. 

Since  os[heat(STEAM)]  -  i,  both  of  the  influences  on  temperature(STEAM)  arc  positive,  so 
Ds[ temperature(STEAM) ]  ■  1. 

So  far  we  have  discovered  that 

Os[pressure(STEAM)]  -  Ds[temperature(STEAM)]«l. 

Since  the  water  and  steam  are  in  contact  their  pressures  will  be  equal,  and  since  pressure  indirectly  affects  the 
boiling  temperature,  the  boiling  temperature  will  also  rise.  The  possible  relative  rates  introduce  three  cases.  If 
the  boiling  temperature  is  rising  faster  (om[t-boi  i  (water)]  >  Dm[temperature(STEAM)])  then  the  boiling  will 
stop,  the  heat  flow  will  increase  heat( water)  again,  the  temperature  will  rise,  and  die  boiling  will  begin 
again.7  In  die  other  two  cases  (om[t-boii(WATER)]  -  Dn[temperature(STEAM)]  and  Dm[t-boii(WATER)]  < 
Dn[t«nperature(STEAM)])  the  boiling  will  continue,  albeit  at  a  higher  temperature  and  pressure.  In  all  three 
cases,  the  increasing  pressure  makes  A[pressure(CAN)]  ■  A[p-burst(CAN)]  possible,  in  which  case  the 
container  explodes.  The  alternatives  are  summarized  in  figure  27.  To  actually  determine  which  of  dicse 
occurs  requires  more  information,  but  at  least  wc  have  a  warning  of  potential  disaster. 
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C!  Fig.  27.  Alternatives  for  sealed  container 

Here  arc  the  process  structures  envisioned  for  water  being  heated  in  a  sealed  container,  generated  by  repeated 

limit  analysis. 


PS  {heat-flow} 


4.3  Modeling  motion 

One  process  we  reason  about  every  day  is  motion.  Motion  is  complex  because  it  is  intimately 
connected  with  our  concepts  of  space  and  shape.  Since  QP  theory  only  describes  the  form  of  qualitative 
dynamical  theories,  it  cannot  carry  the  entire  representational  burden  imposed  by  motion.  After  developing  a 
simple  motion  vocabulary,  we  compare  die  QP  descriptions  with  the  earlier  qualitative  state  representation  in 
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order  to  illustrate  the  strengths  and  weaknesses  of  the  QP  model. 

4.3.1  A  simple  motion  vocabulary 

Consider  a  single  object  moving  in  one  dimension.  Hy  ignoring  the  particular  kind  of  motion  it 
exhibits  (fly.  slide,  swing,  roll)  which  depends  on  the  particular  shape  and  type  of  contact  with  other 
surfaces,  we  can  develop  an  abstract  vocabulary  for  describing  motion.  While  very  weak,  such  abstract 
descriptions  have  certain  uses  --  we  can  deduce  that  if  we  kick  something  but  it  is  blocked,  for  instance,  then  it 
will  not  move,  and  if  we  can  rule  out  die  most  abstract  motion  possible  we  have  ailed  out  all  the  more  specific 
kinds. 

First  we  will  need  some  simple  descriptions  of  spatial  relationships.  The  symbols  l  and  -1  wid 
denote  distinct  directions  along  some  axis,  and  for  some  quantity  Q 

Direction-Of(<direction>.  Q) 

is  true  exactly  when  as[Q]  equals  the  indicated  direction.  The  location  of  an  object  is  modeled  by  a  quantity 
position,  and  if  dicrc  is  no  immobile  object  directly  against  an  object  B  in  direction  dir  we  say 

Free-0irection(8.  dir) 

If  there  is  an  object  in  that  direction  which  is  directly  in  contact  with  it,  say  C,  then  we  say 
Contact(B,  C.  dir) 

Finally,  when  some  object  c  lies  along  direction  a  \  r  from  object  B,  we  will  say 
Oirection-Towards(B,  C.  dir) 

Figure  28  contains  the  process  specifications  for  motion  and  acceleration.  The  motion  process 
occurs  when  a  mobile  object  has  a  non-zero  velocity  and  is  free  to  move  in  the  direction  of  its  velocity  (i.e.,  no 
other  objects  in  the  way).  Motion  is  a  positive  influence  on  position  of  an  object,  in  that  if  the  velocity  is 
positive  the  position  w  ill  "increase"  and  if  the  velocity  is  negative  the  position  will  "decrease”.  (1710  problem 
of  mapping  a  quantity  space  onto  more  complex  geometric  frames  of  reference  will  be  considered  in  detail 
below)  Acceleration  occurs  when  a  mobile  object  has  some  non-zero  net  force  in  a  free  direction. 
Acceleration  provides  a  positive  influence  on  velocity,  and  in  fact  die  influence  is  qualitatively  proportional  to 
the  net  force  and  qualitatively  inversely  proportional  to  the  mass  of  the  object  --  the  QP  version  of  Newton’s 
second  law. 

While  this  description  is  Newtonian,  Aristotelian  and  Impetus  theories  can  also  be  described.1  One 
form  of  Aristotelian  motion,  for  example,  can  be  written  as  in  figure  29.  Here  motion  only  occurs  when  an 
object  is  being  pushed.  An  impetus  theory  is  described  in  figure  30.  Aristotelian  theory  has  the  problem  of 
explaining  what  keeps  a  moving  object  going  once  it  doesn’t  touch  anything;  impetus  theory  explains  this  by 
postulating  that  the  push  gives  an  object  a  kind  of  internal  force  or  "impetus".  While  superficially  like 


1.  [McCloskcy,  1983]  and  [Clement,  19831  argue  that  naive  theories  of  motion  in  our  culture  correspond  to 
impetus  theories,  rather  than  Aristotelian  theories  as  previously  suggested. 
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Fig.  28.  Process  descriptions  of  Newtonian  motion  and  acceleration 

In  tliis  motion  vocabulary  wc  have  abstracted  away  tire  kind  of  motion  occuring  (flying,  sliding,  swinging, 
etc.)  and  die  complexities  of  motion  in  more  than  one  dimension.  Wc  assume  sign  values  arc  assigned  to 
directions  along  some  axis,  with  magnitudes  indicating  distance  from  some  arbitrarily  chosen  origin. 


Process  Motion(B.dlr) 

individual  $ : 

8  an  object,  Mobile(B) 
dir  a  direction 

Preconditions: 

Free-direction(B,  dir) 
Direction-Of(dir,  velocity(B)) 

Quant ityCond it  ions: 

Am[velocity(B)]  >  ZERO 


Influences: 

I+(position(B) ,  A[velocity{B)]) 


Process  Acceleration^, dir) 

Individuals : 

B  an  object,  Mobile(B) 
dir  a  direction 

Preconditions: 

Free-Direct ion(B, dir) 

Oirection-Of(dir.  net-force(B)) 

Quantl tyConditions: 

Am[net-force(B)]  >  ZERO 

Relations 

Let  acc  be  a  quantity 
acc  °Cq+  net-force(B) 
acc  °Cq_  mass(B) 

;  The  basic  QP  version  of  F  «  m  *  a 
Correspondence( ( A[acc]  ZERO) 

(A[net-force(B)]  ZERO)) 
Influences:  1+  (velocity(B)  A[Accj) 


momentum,  impetus  kinematics  is  very  different.1  Impetus  also  differs  from  momentum  in  that  it  can 


1.  In  particular,  impetus  is  not  a  vector  quantity.  Subjects  vary  in  their  beliefs  as  to  the  means  of  combination 
for  impetus:  they  include  rules  like  "The  motion  is  in  the  direction  of  the  biggest  impetus."  lTicrc  arc  odicr 
oddities  as  well  --  for  example,  impetus  "remembers"  not  just  the  direction  of  the  push  but  some  of  the 
previous  history  of  directions,  so  that  a  moving  object  leaving  a  spiral  tube  will  move  in  a  spiral  for  a  little 
while.  Sec  [MeCloskcy.  1983|  for  details. 
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Tig.  29.  Aristotelian  motion 

Aristotle  thcori/cd  that  objects  required  a  constant  push  to  keep  them  going.  Note  that  velocity  docs  not 
have  an  existence  independent  of  die  motion  process. 

Process  Motion 

Individuals: 

B  an  object,  Mobile(8) 
dir  a  direction 

Preconditions: 

Free-Direction(B,  dir) 

Direction-Of(dir,  net-force(B)) 

Quant i tyCondi t ions : 

Am[net-force(B)]  >  ZERO 

Relations: 

let  velocity  be  a  quantity 
velocity  °Cq+  net-force(B) 
velocity  mass(B) 

Influences : 

I+(position(B) ,  A[va1ocity]) 


spontaneously  dissipate.  Compare  die  dissipation  of  impetus  with  the  Newtonian  model  of  sliding  friction  in 
figure  31.  Here  friction  occurs  when  there  is  surface  contact,  and  produces  a  force  on  die  object  that  is 
qualitatively  proportional  to  the  normal  force  and  acts  in  a  direction  opposite  diat  of  die  motion.  lhc  cfTect 
of  friction  occurs  indirectly,  through  providing  a  force  dial  changes  acceleration,  rather  than  directly  as  in  the 
impetus  theory. 

Collisions  arc  complicated  in  any  theory  of  motion,  because  they  arc  usually  described  in  terms  of  a 
piece  of  history.  We  will  use  an  encapsulated  history,  as  introduced  in  Section  3.8.  The  simplest  description 
of  a  collision  just  involves  a  reversal  of  velocity,  as  illustrated  in  figure  32.  As  a  simplification  we  have 
assumed  c  is  immobile  so  that  we  won’t  have  to  worry  about  momentum  transfer  between  moving  objects  and 
changes  of  direction  in  more  than  one  dimension.  F.vcn  our  more  complicated  models  of  collisions  appear  to 
use  such  encapsulated  histories,  such  as  a  compound  history  consisting  of  contacting  die  surface,  compression, 
expansion,  and  finally  breaking  contact.  The  type  of  collision  --  clastic  or  inelastic  --  that  occurs  could  be 
specified  by  referring  to  a  theory  of  materials  for  the  objects  involved. 
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l-'ij;.  30.  An  impetus  dynamics  for  motion 

In  impetus  theories  of  motion,  a  push  imparts  "impetus"  to  an  object.  An  object's  impetus  is  an  internalized 
force  that  keeps  on  pushing  the  object,  thus  causing  motion.  Motion  eventually  stops  because  impetus 
dissipates  with  time. 


Process  Motion 

Individuals: 

B  an  object,  Mobile(B) 
dir  a  direction 

Preconditions: 

Free-0irection(8,  dir) 
0irection-0f(dir,  impetus(B)) 

Quant ityCondit ions: 

Am[impetus(8)]  >  ZERO 

Relations: 

let  vel  be  a  quantity 
vel  <Xq+  impetus(B) 

Influences : 

I  +  ( pos i t ion (B) ,  A[vel]) 


Process  Impart 

Individual s : 

B  an  object,  Mobile(B) 
dir  a  direction 

Preconditions: 

Free-Direetion(B,  dir) 
Direction-Of (dir ,  net-force(B)) 

Quanti tyConditions : 

Am[net-force(B)]  >  ZERO 

Rel at  ions : 

Let  acc  be  a  quantity 
acc  «q+  net-force(B) 
acc  ocq.  mass(B) 

Influences: 

I+( impetus(B) ,  A[acc]) 


Process  Dissipate 

Individual s : 

B  an  object,  Mobile(B) 

Quanti tyCondi t ions : 

Am[ impetus ( B ) ]  >  ZERO 

Relations: 

Let  acc  be  a  quantity 
As[acc]  *  As[impetus(B)] 

Influences: 

I-( impetus(B) ,  A[acc]) 
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Fig.  31.  Morin}"  friction  in  nevvtoniun  sliding 

Objects  have  a  set  forces-on.  whose  sum  is  the  net  force  on  the  object.  Friction  is  modeled  by  an 
individual  view  rather  titan  a  process  because  it  contributes  directly  to  the  force  on  an  object,  rather  than  the 
derivative  of  the  force. 

Individual  View  Moving-Friction 

Individual s  : 

B  an  object.  Mobile(B) 

S  a  surface 
dir  a  direction 

Preconditions: 

SI  i ding -Con tact(8,S) 

QuantityConditions: 

Motion(B.  dir) 

Relations: 

Let  fr  be  a  quantity 
fr  <Xq+  normal -force(B) 

As[fr]  ■  -As[velocity(B)] 
fr  €  forces-on(B) 


Fig.  32.  Colliding  modeled  as  an  encapsulated  history 

Sometimes  all  we  know  about  a  situation  is  die  particular  kind  of  behavior  that  will  occur.  While  violating 
composability.  encapsulated  histories  arc  the  only  way  to  evolve  a  history  in  such  cases.  This  particular 
encapsulated  History  describes  a  perfectly  clastic  collision  with  a  fixed  object  in  one  dimension. 


Encapsulated-History  Collide(B,  C,  dir) 

Individual s : 

B  an  object,  Mobile(B) 

C  an  object,  Immoblle(C) 
dir  a  direction 
E  an  event 

Preconditions: 

(T  contact(B ,C  ,  dir )  start(E)) 

(T  direction-towards(B,C, dir)  start(E)) 

QuantityConditlon: 

(T  Motion(B.dir)  start(E)) 

Relations: 

(M  A[velocity(8)]  start(E) )  ■  -  {M  A[vel oc i ty ( B) ]  end(E)) 

(M  velocity(B)  during(E))  ■  ZERO 
duration(E)  ■  ZERO 
(T  contact(B,C  ,dir)  end(E)) 
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4.3.2  Relationship  to  qualitative  states 

Previous  work  on  representing  motion  used  a  qualitative  state  representation  for  motion  [dc  Klccr, 
1975]|lorbus.  1981a],  an  abstraction  of  die  notion  of  stale  in  classical  mechanics.  Some  of  the  parameters  that 
would  appear  in  a  classical  description  of  state  are  represented  abstractly  --  for  example,  position  is 
represented  by  a  piece  of  space,  and  velocity  by  a  symbolic  heading.  While  in  classical  physics  the  type  of 
activity  is  left  implicit  in  tire  choice  of  descriptive  equations,  the  qualitative  state  representation  explicitly 
names  the  type  of  activity  (fly,  slide,  etc).  Qualitative  states  are  linked  by  simulation  rules  that  map  a 
qualitative  state  into  the  set  of  qualitative  states  that  can  occur  next.  Fnvisioning  using  such  simulation  rules 
is  simple;  given  an  initial  state  use  the  rules  to  generate  new  states,  and  repeat  until  no  new  states  are 
generated,  l-igurc  33  illustrates  a  physical  situation  and  the  envisionment  that  results.  I'hc  envisionment  can 
be  used  to  answer  simple  questions  directly,  assimilate  certain  global  assumptions  about  motion,  and  plan 
solutions  to  more  complex  questions.  Ily  examining  tire  relationship  between  tire  qualitative  state 
representation  and  tire  QP  representation  we  w  ill  understand  both  more  clearly. 

Consider  a  process  vocabulary  comprised  solely  of  motion  and  acceleration.  The  limit  analysis  for  a 
mov  ing  object  will  include  only  the  possibilities  raised  by  dynamics,  such  as  the  acceleration  due  to  gravity 
rev  ersing  the  v  elocity  of  a  ball  or  friction  bringing  a  sliding  block  to  a  halt.  The  possible  changes  in  process 
structure  caused  by  kinematics  --  such  as  the  ball  hitting  a  wall  or  the  block  flying  off  a  table  -  are  not 
predicted  within  this  vocabulary.  To  include  them  would  require  encoding  the  relevant  geometry  in  such  a 
way  that  it  can  be  moved  out  of  the  preconditions  into  die  quantity  conditions.  To  do  this,  we  must  first 
describe  space  by  a  place  vocabulary }  because  we  must  break  space  up  into  distinct  pieces  that  can  be 
reasoned  about  symbolically.  We  might  then  try  to  use  the  entities  in  the  place  vocabulary  as  elements  in  the 
quantity  space  for  position.  Then  the  kinematic  changes  would  be  discovered  by  limit  analysis  just  as  the 
dy  namical  ones  are. 

Unfortunately,  tilings  arc  not  so  simple.  F'irst,  we  need  to  introduce  an  ordering  between  elements 
of  the  place  vocabulary.  (  This  ordering  need  not  be  total;  wc  can  use  ambiguity  in  the  ordering  to  represent 
our  lack  of  knowledge  about  the  precise  heading  of  the  moving  object).  For  motion  in  two  or  three 
dimensions  this  requires  specifying  a  direction,  since  total  orders  arc  only  well-defined  for  one  dimension. 
And  because  we  have  specified  a  direction,  wc  now  must  also  specify  the  place  we  arc  starting  from,  since  that 
will  determine  what  the  neighbors  in  the  position  quantity  space  arc.  (Consider  walking  out  your  front  door 
while  throwing  a  ball  up  in  the  air.  What  the  ball  might  hit  changes  dramatically.)  However,  this  means  the 
place  and  direction  must  be  included  in  the  specification  of  the  motion  process.  If  we  could  succssfully  add 
such  information,  an  instance  of  the  motion  process  in  this  vocabulary  would  begin  to  look  like  a  qualitative 
state  for  the  same  collection  of  places  and  type  of  motion.  The  qualitative  simulation  rules  would  thus 
roughly  correspond  to  a  compilation  of  the  limit  analysis  on  this  new  motion  vocabulary. 

From  this  perspective  we  can  sec  the  relative  strengths  of  the  two  representations.  For  evolving 
descriptions  of  motion  the  qualitative  state  representation  seems  superior,  because  kinematic  constraints  are 
essential  to  motion.  I  lowcvcr.  simulation  rules  are  an  opaque  form  of  dynamics  theory  --  they  do  not  contain 


1.  [F'orbus,  1981a]  describes  die  principles  involved  and  defines  a  place  vocabulary  for  motion  through  space 
in  a  simple  domain. 
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Fig.  33.  Qu;ilit:iti>e  state  description  of  motion 

Consider  ihc  ball  moving  leftwards  as  depicted  below.  A  qualitative  description  of  space  {place  vocabulary) 
can  be  computed  from  the  diagram  and  the  possible  ways  the  ball  can  move  given  dial  initial  state  are 
depicted  schematically  over  die  places  dicy  occur.  A  detailed  description  of  one  state  and  its  relationships 
between  other  states  is  also  shown. 


%cdt J FLY  Space-8egion3  (Left  Down) 
leads  to 

PASS  Segments  (Left  Down) 
COLLIDE  Segnent3  (Left  Down) 


S£ai  COLLIDE  Segment3  (Left  Down) 
leads  to 

SLIDE/STOP  Segment3  (Left  Down) 
FLY  Segment3  (Left  Up) 


Physical  Situation 


Place  Vocabulary 


Result  of  Envisioning  - ► 

(86  distinct  Qualitative  States) 


«  I 


_\Z.. 


Xr 


— - Border 


Division  in  free  space 
Surface 


SEQ  1 


Forbus 


-64- 


QP  theory 


the  assumptions  under  which  they  operate.  Thus  its  "compiled”  nature  makes  die  qualitative  state 
representation  inappropriate  for  \cry  simple  deductions  (where  only  part  of  a  qualitative  state  is  known),  or 
for  more  subtle  analyses  that  involve  perturbing  a  system.  In  particular,  the  qualitative  state  representations 
for  motion  are  not  easily  eomposablc  to  form  descriptions  of  more  complex  systems.  The  example  of  section 
4.5  illustrates  a  more  subtle  analysis  of  motion  made  possible  by  Qualitative  Process  theory. 

4.4  Modeling  materials 

l  et  us  consider  what  happens  when  we  pull  on  something.  If  it  doesn't  move,  then  its  internal 
structure  is  "taking  up”  the  force  (this  can  happen  even  if  it  docs  move  -  try  hitting  .in  egg  w  ith  a  baseball  bat 
-  but  we  will  ignore  this  case).  Three  things  can  happen  -  (1)  it  might  do  nothing  (rigid  behavior),  (2)  it  might 
stretch  (elastic  behavior)  or  (.1)  it  might  break,  l'or  a  push,  die  object  might  again  do  nothing,  it  might 
compress,  or  it  might  crumple.  We  can  use  the  notions  of  quantity  and  process  provided  by  QP  theory  to 
state  these  facts.  In  particular,  we  can  express  the  changes  between  these  kinds  of  behavior  by  creating 
individual  views  describing  these  properties,  introducing  new  elements  into  the  quantity  space  for  forces  on 
an  object. 

The  concepts  involved  with  elasticity  can  be  thought  of  in  terms  of  applied  force  versus  internal 
force.  If  the  magnitude  of  the  applied  force  is  greater  than  that  of  the  internal  force,  then  die  length  of  die 
object  will  change.  The  change  in  length  results  in  an  internal  force  dial  will  counterbalance  the  applied 
force.  Three  individual  views  describe  the  stales  of  an  clastic  object,  cidicr  stretched,  relaxed,  or  compressed. 
Figure  54  illustrates  die  individual  view  tor  clastic  objects  and  their  suites.  To  avoid  die  complications  of 
shape  and  connectivity,  we  only  model  one-dimensional  objects  that  have  a  fixed  end.  By  convention,  forces 
into  an  object  (pushes)  will  be  negative  and  applied  forces  directed  outwards  (pulls)  will  be  positive. 

Imagine  that  we  apply  a  constant  force  to  an  clastic  object  (with,  say,  a  robot  hand  under  force, 
rather  than  position,  control).  An  imbalance  between  internal  and  applied  forces  will  result  in  die  length 
changing.  Fxactly  what  occurs  depends  on  the  state  of  die  elastic  object  (stretched,  relaxed,  compressed),  die 
sign  of  the  applied  force,  and  die  relative  magnitudes  of  the  forces  (the  dependence  on  die  sign  of  the  internal 
force  is  encoded  in  the  state  of  the  object  via  die  oc^  and  correspondence.).  'The  four  possibilities  are 
stretching,  compressing,  and  two  kinds  of  relaxing.  'These  processes  arc  described  in  I-'igure  35. 

Of  course,  objects  arc  not  perfectly  clastic.  If  the  applied  force  is  very  small,  objects  will  often 
behave  rigidly.  If  too  much  force  is  applied  an  object  can  break  or  crush.  The  rigidity  under  small  forces  can 
be  modeled  by  adding  another  quantity  condition  to  stretching  and  compressing.  For  a  partially  clastic  object 
die  thresholds  for  compressing  and  stretching  will  be  called  fcompress  and  fstretch  respectively.  The 
conditions  under  which  crushing  and  breaking  can  be  captured  similarly  by  dircsbolds  fcrush  and  fbreak. 
w  hich  arc  functions  of  both  die  material  and  the  object  (to  allow  for  dependence  on  the  shape).  The  process 
descriptions  for  crushing  and  breaking  arc  however  more  complex  than  compressing  and  stretching  because 
they  involve  irreversible  changes.  I  his  requires  statements  in  die  relations  field  that  explicitly  mention  time, 
turning  the  description  into  an  encapsulated  history  rather  Uian  a  true  process.  Much  of  the  information  that 
must  be  included  concerns  deformations  of  shape  and  transformations  of  one  object  into  several.  As  with 
kinematics,  these  issues  aic  beyond  the  scope  of  Qualitative  Process  theory. 

Figure  36  illustrates  force  quantity  spaces  corresponding  to  different  kinds  of  materials.  In  theory  a 
taxonomy  such  .is  this  one  could  he  used  for  classifying  a  material  by  applying  forces  to  it  and  seeing  what 
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I  ig.  .'4,  Descriptions  of  elastic  objects 

An  clastic  object  stores  energy  in  reversible  deformations  of  shape.  The  basic  view  of  an  elastic  object  relates 
the  internal  force  and  length,  and  the  other  three  views  describe  the  suites  it  can  be  in. 

Ind  iv  idual -View  Elastic-Object 

Individuals: 

B  an  object 

Preconditions: 

Elastic-Substance(nade-of(8)) 

Rel ations : 

Has-Quantity(8,  length) 

Has-Quantity(B,  internal-force) 

Has-Quant i ty(B ,  rest-length) 

0S[ res t- l eng th( 8 ) ]  ■  0 
i n ter nal  - f orce( B )  otgv  length(B) 

Correspondence((internal-force(B)  ZERO) 

(length(B)  rest-length(B) ) ) 


I nd l v i dual -View  Relaxed 

Individual s : 

B  an  elastic-object 

Quan t i tyCondi  t ions  : 

A[1ength(8)]  *  A[resl-1 ength(8)3 


Individual -View  Stretched 

Individuals: 

B  an  elastic-object 

QuantityConditions: 

A[length(B)]  >  A[ res t- 1  eng th(B) ] 


Individual -View  Compressed 

Individuals: 

B  an  elastic-object 

QuantityConditions: 

A[length(8)]  <  A[ res t- 1  eng th{ B ) ] 
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I  ig.  35.  Stretching,  compressing,  ;ind  relaxing 

The  continuous  changes  that  can  occur  to  elastic  objects  ■  1  .trained  by  an  applied  force  arc  described 

below.  Ihe  individual  views  of  stretched,  compressed,  and  rcla^d  are  described  in  die  previous  figure. 


process  Stretching 

Individuals: 

B  an  elastic  object 

Preconditions: 

—i  Posi  tion-Constrained(B) 

QuantityConditions: 

“i  Compressed(8) 

As[app 1 i ed-force(B ) ]  «  1 
Ap [applied-force (8)] 

>  Am[internal-forc8(B)] 

Rel ations : 

Let  SR  be  a  quantity 

SR  <Xg+  (An[appl ied-force(B)] 

-  An[internal -force(B)]) 

Influences: 

I  +  ( length(B) ,  SR) 


process  Relaxing-Minus 

Individual s : 

B  an  elastic  object 

Preconditions: 

"-1  Pos  i  t  ion-Cons  trai  ned(  B ) 

QuantityConditions: 

Stretched(B) 

An[appl ied-force(B)] 

<  Am[internal-force(B)] 

Relations: 

Let  SR  be  a  quantity 

SR  <Xq+  (An[appl ied-force(B)] 

-  Am[internal -force(B)]) 

Influences : 

I-( length(B).  SR) 


process  Compressing 

Individuals: 

8  an  elastic  object 

Preconditions: 

-1  Position-Constrained(B) 

QuantityConditions: 

-i  Stretched(B) 

As[appl  ied-force(B)]  •  -1 
Am[applied-force(B)] 

>  Am[ internal -force(B)] 

Relations : 

Let  SR  be  a  quantity 

SR  aQ+  (A^fappl ied-force(B)] 

-  Am[ internal -force(B)]) 


process  Relaxing-plus 

Individuals: 

B  an  elastic  object 

Preconditions: 

->  Position-Constrained(B) 

QuantityConditions: 

Compressed(8 ) 

Am[appl ied-force(B)] 

<  Am[ internal -forcelB)] 


Relations : 

Let  SR  be  a  quantity 
SR  «q+  ( A^fappl  ied-force(B)  ] 

-  A^tinternal-forcefB)]) 


Influences : 

I-( length(B) ,  SR) 


Influences : 

I+( length(B) ,  SR) 
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I  itt  76.  Materials  classified  by  quantity  spaces 

Distinct  kinds  of  materials  give  rise  to  different  quantity  spaces  because  different  combinations  of  processes 
can  occur.  Ibis  taxonomy  should  allow  a  material  to  be  classified  by  applying  forces  and  observing  what 
kinds  of  things  actually  occur. 

Rigid: 

<no  processes  affecting  1ength> 

Elastic: 

<stretching  and  compressing  apply> 

Breakable: 

ZERO  <  fbrealc 

Crushabl e : 

^crush  <  ZERO 

Partially  stretchable: 

ZERO  <  fsbretch 

Partially  compressible: 

^compress  *  ZERO 

Brittle: 

fcrush  *  ZERO  <  fbreak 

Partial 1y  elastic: 

fcompress  *  ZERO  <  fjtretch 

Hormal  -. 

fcrosh  4  fcorrlpress  <  ZERO  <  fstretch  *  ^break 


sens  of  behavior  result  In  a  richer  model  of  materials  forces  along  different  directions  would  result  in 
different  behavior  (such  as  attempting  to  bend  balsa  wood  against  its  grain  instead  of  along  the  grain)  and  tiic 
effects  ot  plastic  deformation  would  be  included. 

A  classic  .!  conundrum  is  to  be  able  to  express  in  some  usable  form  tit  at  "you  can  pull  with  a  string, 
but  not  push  with  it".:  I  his  fact  can  be  succinctly  suited,  at  least  to  a  first  approximation,  using  QP  theory. 
I  list,  consider  wh.it  pushes  and  pulls  are.  doth  concepts  involve  one  object  making  contact  with  another  to 
ipply  loae.  Ka.ill  that  if  ihc  dnection  of  the  applied  force  is  towards  the  object  it  is  a  push,  and  if  the 
direuion  is  aw.iv  from  the  objec  t  then  it  is  a  pull.  Obviously  a  push  can  occur  with  any  kind  of  contact,  but 
pulls  cannot  occur  when  two  objects  merely  touch  each  other. 

I  ndei st. Hiding  how  pushes  and  pulls  arc  transmitted  is  fundamental  to  understanding  mechanisms. 
I  or  a  first  pass  model,  considei  the  notion  of  /uisli-ininsmiiicrs  and  pull-trammiiicrs.  We  say  an  object  is  a 
[lush  ti.nismittoi  if  when  n  is  pushed,  it  will  in  turn  push  an  object  that  is  in  contact  with  it.  in  the  direction 
between  the  two  contact  points.  Pull  transmitters  can  be  similarly  defined.  This  particular  set  of  definitions  is 


1.  Marvin  Minsky,  personal  communication 
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obviously  inadequate  for  mechanisms,2  and  is  only  for  illustration.  Note  also  dial  push-transmitters  and 
pull-transmitters  need  not  be  reflexive  relations.  Rigid  objects  arc  an  exceptional  case: 

V  8  €  object 

rigid(B)  =>  (V  c^,  C2  €  contact-potnts(B) 

Push-Transmitter{cj,  eg ) 

A  Push-Transmitter(C2.  Cj) 

A  Pul  1 -Transmi tter(Cj ,  C2 ) 

A  Pull-Transnitter(C2.  Cj)) 

Strings,  however,  are  more  complicated.  A  string  can  never  be  a  push-transmitter: 

V  s  €  string 

(V  t  €  time  (T  (~ '  Push-Transmi tter ( endl ( s ) .  end2(s)) 

A  -i  Push-Transmitter(end2(s),  end 1 ( s ) ) )  t)) 

Rut  if  it  is  Taut  it  can  be  a  pull  transmitter. 

V  s  6  string 
( V  t  €  t  im a 

(T  taut(s)  t)  =*  (T  Pul 1-Transmitter(endl( s) ,  end2(s))  t) 

A  (T  Pul  1 -Transmitter(end2( s)  endl(s))  t)) 

Now  the  problem  becomes  how  to  define  Taut.  As  a  first  pass,  let  ends-distance  be  a  type  of  quantity 
representing  the  distance  between  die  ends  of  die  string.  Then  we  can  define  Taut  as  an  individual  view: 

Individual  View  Taut 
Individual s : 

s  a  string 

Quantity  Conditions: 

Am[ends-distance(s)]  <  Am[length(s)] 

This  model  assumes  diat  only  the  ends  of  the  string  contact  other  objects  -  it  would  fail  for  a  rope  hanging 
over  a  pulley,  for  instance.  A  better  model  is  to  divide  up  the  string  into  segments  according  to  whether  or 
not  that  part  of  die  string  is  in  contact  with  a  surface.  A  string  is  then  taut  if  each  segment  that  is  not  in 
contact  with  a  surface  is  taut: 


V  S  €  String 

(V  seg  €  segments(geometry(S))  Free-Segment(seg,  S)  =*  Taut(seg)) 

=>  Taut(S) 

This  of  course  ignores  the  fact  that  the  non-frcc  segments  may  not  be  tight,  as  say  for  string  lying  on  the  floor. 
A  full  definition  would  also  require  tension  along  the  entire  siring,  but  we  have  strayed  far  enough  from 
dynamics  already. 


2.  Consider  for  example  a  rocker  arm  connected  to  a  pivot  or  two  blocks  resting  on  die  floor  that  arc  tied  to 
together  by  a  length  of  string.  In  die  first  ease  a  push  will  be  transmitted  in  a  different  direction,  and  in  the 
second  ease  it  can  be  transformed  into  a  pull.  Belter  theories  of  push  and  pull  transmitters  will  require 
representing  kinematics  in  two  and  dircc  dimensions. 
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4.5  An  oscillator 

Dynamical  reasoning  invokes  more  tlian  just  simulation.  By  analyzing  the  possible  behaviors  of  a 
situation  we  can  produce  a  summary  of  its  behavior  and  eventual  disposition(e.g..  [Forbus,  198 la]).  In 
classical  physics  these  analyses  arc  often  concerned  with  stability.  Here  we  will  examine  a  simple  situation 
involving  motion  and  materials,  ascertain  that  it  is  an  oscillator,  and  perturb  it  to  figure  out  under  what 
conditions  it  will  remain  stable. 

Consider  die  block  b  connected  to  the  spring  s  in  figure  37.  We  will  model  the  spring  s  as  device 
satisfying  Hooke's  law  (see  figure  34).  Initially  we  will  assume  the  spring  cannot  break.  To  model  die 
position  constraint  on  die  spring's  length  by  being  rigidly  connected  to  the  block  and  to  set  the  origin  of 
position  to  the  location  at  which  die  spring  is  relaxed,  we  will  assume: 

length(S)  ocg+  position(8) 

Corresponaence( ( A[length(S)]  A[ res t-1 eng th{ S )  ] )  ( A[pos i t ion(B ) ]  ZERO)) 

Suppose  die  block  is  pulled  back  so  that  the  spring  is  extended.  Initially  we  also  assume  that  the  contact 
between  die  block  and  the  floor  is  frictionlcss.  What  will  happen? 

Since  initially  the  spring  is  extended  (i.e..  A[iengtn(S) ]  >  A[rest-iength(S)]),  the  spring  will  exert 


Fig.  37.  A  sliding  block 

Here  is  a  system  we  will  analyze  tc 
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a  force.  This  will  in  turn  exert  a  force  on  the  block  which,  since  the  block  is  free  to  move  leftwards  (s  is  not 
immobile),  will  cause  an  acceleration.  So  the  initial  view  and  process  structures  are: 

VS:  {Stretched( S ) } 

PS:  {Acceleration^ ,  -1)} 

However.  A[veiocity(8)]  will  change  from  zero  in  an  instant  (by  case  1  of  die  equality  change  law),  so  the 
process  structure  will  become 

PS:  {Acceleration^,  -1).  Motion(B.  -1)} 

Since  0$[position(B)]  «-i,  by  the  oc^+  above  we  have  Ds[iength(S)]  --1  as  well,  and  by  the  correspondence 
in  the  definition  of  clastic  objects,  o  [  internal  -force(S)]  *-i  as  well.  The  next  limit  point  is  reached  when 
A[ i eng th( S) ]  -  a[ res t- 1 eng th( s ) ],  making  s  relaxed  instead  of  stretched.  When  this  occurs 
Afnet-force(B)]  -  zero,  dius  ending  the  acceleration.  The  motion,  however,  continues.  The  process  and 
view  structures  become: 

VS:  {Relaxed(S)} 

PS:  {Met ion( B ,  -1)} 

This  state  of  affairs  will  last  but  an  instant,  since  position  is  still  decreasing.  As  the  position  moves  past  zero 
we  will  have 


VS:  {Compressed(S)} 

PS:  {Mot i on ( B ,  -1).  Acceleration^,  X)} 

The  only  limit  point  that  can  be  reached  occurs  in  the  quantity  space  for  velocity,  i.c.  A[veiocity(B)]  -  zero. 
When  that  occurs  the  motion  will  stop,  leaving: 

VS:  {Conpressed(S)} 

PS :  {Accel erat ion(B,  1)} 

Since  acceleration  directly  influences  velocity,  this  state  of  affairs  will  instantly  change  to: 


VS:  {Compressed(S)} 

PS:  {Motion(B,  1),  Acceleration^,  1)) 

The  conclusion  that  the  next  change  results  in 


VS:  {Rel axed(S)} 

PS:  {Motion(B,  1)} 

with  an  instantaneous  change  to 


VS:  {Stretched(S)} 

PS:  {Motion(B,  1),  Acceleration^,  -1)} 
which  lasts  for  an  interval  and  then  yields 

VS-  {Stretched(S)} 

PS:  {Acceleration(B,  -1)} 

follows  in  the  same  way.  However,  diis  situation  matches  die  initial  situation  •  the  quantity  spaces,  view  and 
process  structures,  and  os  values  arc  all  the  same.  Thus  we  can  conclude  that  an  oscillation  is  occuring.  Note 
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that  the  view  and  process  structures  must  be  the  same,  because  in  principle  the  preconditions  might  have 
changed. 

Some  of  die  assumptions  made  in  producing  the  process  history  can  now  be  perturbed  to  examine 
the  effects  of  different  physical  models,  For  instance,  suppose  the  spring  is  ciushahlc  and  bieakable,  as 
defined  previously.  Then  there  are  limit  points  aioimd  rest- lengths)  that  cm  respond  to  th;  occurrence  -f 
crushing  or  breaking.  It  seems  crushing  must  be  ailed  mil  b>  assumption,  since  die  machinery  we  have 
developed  so  far  does  not  allow  us  to  rule  it  out  via  contradiction.  We  can.  however,  deduce  that  the  spring 
won’t  break  under  the  conditions  above. 

If  we  can  prove  that  the  block  will  go  out  no  further  than  when  it  started,  then  we  can  claim  that  it 
won't  break  because  it  didn't  break  in  the  fust  place  I  his  requites  an  energy  argument.  I  he  energy  theory 
we  will  use  is  very  simple.  I  here  are  certain  types  of  quantities  that  are  ctii  r^yquiinni'cs.  which  arc 
qualitatively  proportional  to  ceitam  other  quantities  and  exist  whenever  dicy  do.  I  wo  kinds  of  energy  are 
kinetic  energy  and  "spring"  encigy.  I  or  every  object  there  is  a  total  energy,  which  is  the  sum  of  its  energy 
quantities.  Figure  38  describes  systems  and  energy  quantities  more  formally,  and  and  figure  V)  describes 
sources,  sinks,  and  conservation  laws. 

Here  the  system  is  die  mass  and  spring  combination.  At  time  tl  the  block  is  still  but  the  spring  is 
stretched,  i.e.. 


(M  A[ vel oc i ty ( B ) ]  tl)  •  ZERO 

(M  A[ 1 ength( S ) ]  tl)  >  A[ r es t -  1  eng th ( S ) ] 

which  means  that 


(M  total -energy( SYSTEM)  tl)  >  ZERO 
If  energy  is  conserved  and  there  is  no  influx  of  energy,  then  we  know 

v  t  C  tine 

Af ter ( t ,  tl)  =>  ~l  ( M  total -energy( SYSTEM)  t)  >  (M  total -energy ( SYSTEM)  tl) 

This  means  dial  the  block  can  only  go  out  as  far  as  it  was  at  ti,  since  if  it  ever  went  out  farther  we  would 
contradict  the  previous  statement. 


i 
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I  ig.  38.  A  simple  energy  theory  ••  energy  &  systems 

The  predicate  Energy-Quantity  asserts  that  its  argument  is  a  quantity  type  representing  a  kind  of  energy, 
l-.nergy  quantities  occur  as  a  consequence  of  objects  having  particular  other  types  of  quantities.  I'hc  energy  of 
a  system  is  the  sum  of  the  energy  quantities  for  its  parts. 


Energy-Quantity (kinetic-energy) 

:velocity  gives  rise  to  kinetic  energy 

V  B  €  object 

Has-Quan t i ty ( 8 .  velocity)  => 

( Has-Quant i ty( B ,  kinetic-energy) 

A  kinetic-energy(B)  °Cq+  m[velocity(B)] 

A  ( A[k ine t i c-ener gy (B ) j  ■  ZERO 

«-►  A[velocity(B)]  *  ZERO)) 

Energy -Quantity(SpringEnergy) 

:  an  internal  force  gives  rise  to  "spring"  energy 

V  B  €  ob  lect 

Has-Quan t i ty( B ,  internal -f orce)  => 

(Has-Quantity(B,  spring-energy) 

A  spring-energy(B)  0Cg+  m[ internal -force(B) ] 

A  (A[spring-energy(B)]  -  ZERO 

«-*  A[interna1-force(B)]  ■  ZERO)) 

;  the  total  energy  of  an  object  is  the  sura  of  its  energy  quantities 

V  B  €  ob  iect 

Has-Quantity(B,  total -energy )  A  Set{ energy-quanti t ies ( B) ) 

A  V  q  C  quantities(B)  Energy-Quan t i ty ( q )  =>  q(B)  €  energy-quantities(B) 
A  total -energy(B)  «  sura-over(energy-quanti ties(B) ) 

;the  energy  of  a  system  is  the  sum  of  the  energy  in  its  objects 

V  sys  E  system  Set ( objects ( sys ) )  A  (V  b  €  objects(sys)  Physob(B)  V  System(B)) 

A  Has-Quantity(sys,  total -energy )  A  Set(  energy-quant i ties( sys) ) 

A  (V  B  €  objects(sys) 

Subset( energy-quanti ties(B),  energy-quantities(sys))) 

; ignore  converse  case  (assume  all  members  must  be  from  some  part) 

A  total -energy(sys)  ■  sum-over ( energy-quant i ties( sys) ) 
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Fig.  39.  A  simple  energy  theory  -  sources,  sinks,  and  conservation 

There  arc  several  forms  of  energy  conservation,  some  stronger  than  others.  The  weakest  says  that  if  there  is 
no  inflow  then  the  energy  never  increases.  The  strongest  says  that  in  a  closed  system  the  energy  is  always  tine 


;processes  can  be  sources  and  sinks  w.r.t.  a  system 

V  pi  C  process-instance  V  sys  G  system  V  q  €  quant i tv- tvoe 

Source( p  i .  sys .  q )  = 

(3  B  C  objects(sys)  Inf  1 uences ( p  i ,  q(B).  +1)) 

A  -i(3  B  C  objects(sys)  Inf  luences(  p  i .  0(B).  *1)) 

;define  sinks  similarly,  ignore  cross-flows 

V  pi  £  process-instance  V  sys  €  system 

Energy -Sour ce( p  i ,  sys) 

=  (3  q  C  quant  i  tv  Energy-Quantity(q) 

A  Source(pi,  sys,  q)) 
A  (V  q  G  qnanti  tv  Ener  gy-Quan  t  i  ty  ( q )  =>  Sink(pi,  sys.  q)) 
;energy  sinks  are  defined  analogously 

; Conservat ion  laws 

; local  version  -  each  process  conserves  energy 

V  p i  G  process- instance 

(3  ql  C  quantity 

Energy-Quantity(ql)  A  Inf  1 uences( pi  ,  ql,  -1)) 

«-»  (3  q2  €  quantity 

Energy-Quantity(q2)  A  Inf luences( pi ,  q2,  1)) 

;if  you  don't  kick  it  it  won't  get  any  higher.. 

V  sys  G  system  V  1  G  time 

(V  pi  G  process-instance 

Energy-Source(pi .  sys)  =*• 

(V  Ij  G  during(i)  (T  Status(pi,  INACTIVE)  I j ) ) ) 

=»  ~ i  (M  total-energy(sys)  end(i))  >  (M  total -energy ( sys )  start(i)) 

;more  complex  version: 

V  sys  €  system  V  1  G  interval 
[(V  oi  G  process- i ns tance 

Energy-Source(pi ,  sys)  =» 

(V  Ij  G  during(i)  (T  Status(pi,  INACTIVE)  It))) 

A  (V  pi  G  process- instance 

Energy-Sink(pi ,  sys)  => 

(V  Ij  G  during(i)  (T  St.  us(pi,  INACTIVE)  I j ) ) ) 

=>  (M  A[total-energy(sys)]  start(i))  •  (M  A[ total -energy( sys ) ]  end(i)) 


4.5.1  Stability  analysis 


To  further  analyze  litis  system,  we  must  treat  the  processes  that  occur  as  a  compound  process.  We 
can  start  by  writing  an  encapsulated  history,  including  properties  of  the  objects  liken  over  the  piece  of  history 
(a  cycle  of  the  oscillator)  so  defined.  We  want  to  perform  an  energy  analysis,  so  we  will  include  the  total 
energy  of  the  system  (totai-energy(SYSTEM))  and  the  maximum  length  of  the  spring  over  a  cycle 
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(max- 1  eng  th(  s ) ),  since  length(S)  gives  us  an  indication  of  "spring  energy".  We  assume  the  relations  for  the 
compound  process  include: 

max-length(S)  °Cq+  total -energy(SYSTEM) 

corresponOence( (nax-1 ength(S) ,  ZERO),  ( total -energy(SYSTEM)  ZERO)) 

since  during  each  cycle  there  will  be  some  time  during  which  all  of  the  energy  is  in  the  spring.  To  perform  an 
energy  analysis  we  must  re-write  any  inequalities  in  die  quantity  conditions  in  terms  of  energy,  to  wit: 

Quantity  Conditions: 

A[total-energy(SYSTEM)]  >  ZERO 

Thus  if  the  total  energy  of  the  system  ever  reaches  zero  during  an  occurrence  of  the  compound  process  it  will 
no  longer  be  acti\c.  because  the  total  energy  of  the  system  is  zero  only  when  die  spring  is  relaxed  and  the 
block  is  unmoving.  Note  that  die  quantity  condition  is  no  longer  tied  to  a  particular  episode  of  the 
encapsulated  history.  This  means  diat.  unlike  the  encapsulated  histories  previously  encountered,  we  cannot 
use  diis  one  for  simulation.  Instead,  we  use  it  to  analyze  global  properties  of  die  system’s  behavior. 

We  c.in  use  the  basic  Q1‘  deductions  on  diis  new  description  to  determine  the  consequences  of 
perturbing  die  model  of  the  situation  in  various  ways,  l-’ach  perturbation  is  represented  by  a  process  that 
influences  one  of  the  parameters  that  determines  die  energy  of  the  system,  f  or  example,  suppose  friction 
were  introduced  into  die  system.  Its  effect  will  be  modeled  by  introducing  a  new  quantity,  e-ioss(SYSTEM), 
the  energy  lost  during  a  cycle.  Then  Ds[totai -energy(SYSTEM) ]--i,  and  we  can  deduce,  via  limit  analysis, 
t)i, it  die  quantity  condition  above  will  eventually  be  false,  and  so  die  oscillation  will  eventually  stop.  Suppose 
die  system  is  pumped  so  that  its  energy  is  increasing  (i.e.,  os[totai-energy(SYSTEM)]«i).  While  die  quantity 
condition  above  will  remain  true,  the  energy  will  be  continually  increasing,  which  means  die  force  on  the 
spring  will  increase  over  lime  (since  during  part  of  the  cycle  the  energy  is  all  in  die  spring,  and  die  spring 
energy  is  qualitatively  proportional  to  die  internal  force  of  die  spring).  If  die  spring  is  breakable,  then  dicre 
w  ill  be  a  limit  point  in  die  quantity  space  for  the  spring's  force  that  will  eventually  be  reached.  So  die  spring 
could  break  if  the  system  is  frictionlcss  and  pumped. 

l.et  us  examine  in  detail  what  happens  if  the  oscillator  is  subject  to  friction,  but  we  pump  it  with 
some  fixed  amount  of  energy  per  cycle,  as  would  happen  in  a  mechanism  such  as  a  clock.  Is  such  a  system 
stable?  We  will  call  the  energy  lost  to  friction  over  a  cycle  e-ioss(SYSTEM)  and  die  energy  added  to  the 
system  over  a  cycle  e-pump(  system).  The  only  things  we  will  assume  about  the  friction  process  in  die  system 
is  that 


Relations: 

e- 1 oss(SYSTEM)  aQ+  total -energy(SYSTEM) 

correspondence((e-loss(SYSTEM),  ZERO),  ( total -ener gy( SYSTEM) ,  ZERO)) 

Influences: 

I- ( total -energy( SYSTEM) ,  A[e- 1 oss ( SYSTEM) ]) 

The  loss  being  qualitatively  proportional  to  the  energy  is  based  on  the  fact  that  die  energy  lost  by  friction  is 
proportional  to  the  distance  traveled,  which  in  turn  is  proportional  to  die  maximum  length  of  die  spring, 
which  itself  is  qualitatively  proportional  to  die  energy  of  the  system,  as  stated  above. 

The  low  er  bound  for  the  energy  of  die  system  is  zero,  and  an  upper  bound  for  energy  is  implicit  in 
the  possibility  of  the  parts  breaking.  The  result,  via  die  statement  above,  is  a  set  of  limit  points  on  the 
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quantity  space  for  e-ioss(SYSTEM).  If  we  assume  e-pump(SYSTEM)  is  within  these  limit  points  then  there  will 
be  a  value  for  total  -energy  (SYSTEM),  call  it  e-stabl  e(  SYSTEM),  such  that: 

V  t  €  cycle 

(M  A[ to tal-energy( SYSTEM)]  t)  -  (M  A[e- s tab  1 e( SYSTEM) ]  t)) 

=>  (M  A[ e- 1 oss ( SYSTEM ) ]  t)  -  (M  A[e-pump( SYSTEM) ]  t) 

Note  that  e-stabie(SYSTEM)  is  unique  because  QCg  is  monotonic.  If  the  energy  of  the  system  is  at  this  point, 
the  influences  of  friction  and  pumping  will  cancel  and  the  system  will  stay  at  this  energy.  Suppose 

(M  A[ total -energy (SYSTEM)]  t)  >  (M  A[e- s tabl e( SYSTEM) ]  t) 

over  some  cycle.  Then  because  the  loss  is  qualitatively  proportional  to  the  energy,  the  energy  loss  will  be 
greater  than  the  energy  gained  by  pumping,  i.e..  Ds[totai-energy(SYSTEM)]»-i,  and  the  energy  will  drop 
until  it  reaches  e-stabie(SYSTEM).  Similarly,  if  total -energy(SYSTEM)  is  less  than  e-stabie(SYSTEM)  die 
influence  of  friction  on  the  energy  will  be  less  than  that  of  the  pumping,  thus  Ds[totai-energy(SYSTEM)]-i. 
I  his  will  continue  until  the  energy  of  the  system  is  again  equal  to  e-stabie(SYSTEM).  Therefore  for  any 
particular  pumping  energy  there  will  be  a  stable  oscillation  point.  I  bis  result  is  actually  a  qualitative  version 
of  the  proof  of  die  existence  and  stability  of  limit  cycles  in  the  solution  of  a  differential  equation.  It  is 
surprising  just  how  little  information  about  the  system  we  needed  to  draw  these  conclusions,  and  it  will  be 
interesting  to  see  what  other  results  from  die  classical  theory  of  differential  equations  can  be  derived  from 
qualitative  information  alone. 
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5.  Further  consequences 

Hie  concepts  of  Qualitative  Process  theory  provide  a  representational  framework  for  a  certain  class 
of  deductions  about  die  physical  world.  In  tins  section  we  examine  the  consequences  of  this  framework  for 
some  "higher-level"  issues  in  common  sense  physical  reasoning.  Several  of  these  issues  arise  in  reasoning 
about  designed  systems,  while  others  cover  more  general  topics. 

5.1  Distinguishing  oscillation  from  stutter 

As  we  hav  e  seen,  envisioning  -  generating  all  the  possible  behaviors  of  a  system  --  can  be  performed 
h>  repeated  limit  analysis.  The  result  is  a  linked  graph  of  situations,  which  can  be  traversed  to  form  any  of  the 
possible  histones  for  fhc  objects  that  comprise  the  system.  In  walking  tins  graph  we  may  find  a  terminal  state 
(either  because  die  situation  is  quiescent,  because  we  do  not  know  how  to  evolve  a  history  past  a  certain  kind 
of  event  or  because  we  simply  haven't  bothered)  or  we  might  find  a  loop.  A  loop  must  be  summarized  if  we 
arc  to  get  a  finite  description  of  the  system's  behavior,  There  are  several  ways  to  produce  such  summaries.  In 
some  systems  die  major  regularity  is  spatial,  in  which  ease  we  would  produce  descriptions  like  "the  ball  is 
bouncing  around  inside  the  wcH"[F'orhus.  1981a].  Another  type  of  concise  summary  is  possible  when  a 
system  is  oscillating,  since  there  is  a  pattern  of  activity  Uiat  occurs  over  and  over  again. 

While  oscillation  in  the  physical  system  results  in  loops  in  the  cnvisionmcni.  there  arc  other 
circumstances  that  give  nse  to  loops  as  well.  Consider  the  situation  illustrated  in  figure  40.  Initially  there  are 
two  flows,  one  from  a  to  b  and  the  other  from  B  to  c.  What  can  happen0  l  imit  analysis  reveals  three 
alternatives,  corresponding  to  each  of  the  flows  stopping  individually  and  to  both  ending  simultaneously  (see 
figure  41).  In  the  cases  where  one  flow  stops  before  the  other,  the  flow  that  continues  will  decrease  the 
amount,  and  hence  pressure,  so  the  other  flow  will  start  again.  These  cycles  of  activity  do  not  corrcpond  to 
physical  oscillations:  diey  arc  an  artifact  of  the  qualitative  physics.  A  better  description  of  this  behavior  is  that 
the  change  in  level  "follows"  the  other  change.  In  other  words,  we  have  a  decaying  equilibrium.  We  will  call 
the  behavior  represented  by  these  degenerate  cycles  stutter.  How  can  we  distinguish  stutter  from  true 
oscillation? 

Physically  an  oscillation  requires  that  die  system  have  some  form  of  inertia  or  hysteresis.  This  means 
that,  at  least  for  some  part  of  die  system,  when  the  cause  of  the  change  stops  acting,  the  change  will  continue 


Fig.  40.  Three  container  example 

Suppose  we  have  three  containers  partially  filled  wjdi  water 
assume  the  water  moves  slowly,  what  can  happen? 


mes,  as  shown  F‘ 


isra  it! 
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Fig.  41,  Stutter  in  fluid  flow 

This  graph  of  transitions  between  process  structures  contains  two  cycles,  neither  of  which  correspond  to 
physical  oscillations.  For  simplicity,  we  ignore  die  possibility  of  die  contained  liquids  vanishing  as  a  result  of 
the  flows. 


IS  tWA  WH .  WC) 

PS  {I  Id- f  lo»(uA  .  W8.  PI).  Mui,l-MowtWH.  WC.  P2)} 


for  a  while  afterwards.  A  real  oscillation  will  therefore  include  process  episodes  that  last  over  an  interval  of 
time,  whereas  stutter  --  a  kind  of  "mythical  oscillation"  -  will  only  include  process  episodes  dial  last  but  an 
insun  t. 

Fortunately  the  equality  change  law  provides  a  way  of  distinguishing  these  eases.  In  the  previous 
transition  diagram,  for  example,  the  transitions  marked  with  an  "i"  ukc  place  in  an  insunt.  Therefore  we 
have  two  instances  of  stutter,  corresponding  to  die  two  fluids  participating  in  a  decreasing  equilibrium. 

A  similar  phenomena  occurred  in  the  boiler  model  presented  earner  (section  4.2).  l'igure  42  depicts 
die  envisionment.  Note  that  if  watep)  rises  faster  dian  temcerature(WATER)  die  boiling  will  stop. 

Since  this  change  in  the  inequality  relationship  between  the  quantities  is  a  change  from  equality,  by  ease  1  of 
the  equalitv  change  law  it  will  occur  in  an  insunt.  T  his  in  turn  means  that  t-oo 1 1  (water)  was  only  influenced 
tor  an  instant.  When  the  boiling  stops  only  die  heat  flow  is  acting,  so  tenperature(WATER)  will  rise,  and  thus 
by  case  2  of  die  equality  change  law  the  return  to  equality  will  occur  in  an  instant.  Ihercfore  Uus  cycle  is  an 
insuncc  ot  stutter  as  well,  corresponding  to  a  rising  equilibrium. 

Being  able  to  distinguisii  stutter  from  oscillation  means  we  can  write  rules  that  summarize  die 
process  history.  For  example,  when  stutter  occurs  we  can  note  the  o$  values  tor  the  quantities  involved  and 
assert  that  one  kind  ofciiange  is  "following"  another,  a  decaying  or  rising  equilibrium.  Informal  observations 


suggest  that  novices  in  a  domain  often  confuse  stutter  and  oscillation,  and  even  expens  who  describe  the 
situation  as  a  decaying  or  rising  equilibrium  arc  able  to  reconstruct  die  view  of  stutter  as  an  oscillation.  These 
informal  observations  need  to  be  examined  in  die  light  of  empirical  data,  but  if  tnic  it  may  be  useful  in  testing 
OP  theory  as  a  psychological  model. 
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5.2  Causal  Reasoning 

We  use  causality  to  impose  order  upon  the  world.  When  we  think  that  "A  causes  B".  we  believe  that 
if  we  want  B  to  happen  we  should  bring  about  A.  and  that  if  we  sec  B  happening  then  A  might  be  the  reason 
for  it.  Causal  reasoning  is  especially  important  for  understanding  physical  systems,  as  noted  in  [Rieger  & 
(irinberg.  1977],  [de  Klcer,  1979],  Hxactly  w  hat  underlies  our  notion  of  causation  in  physic. il  systems  is  still 
something  of  a  mystery. 

Consider  the  representations  used  in  physics.  Typically  equations  arc  used  to  express  constraints 
that  hold  between  physical  parameters.  A  salient  feature  of  equations  is  that  they  can  be  used  in  several 
different  ways.  I -'or  example,  if  we  know  x  ■  a  +  b.  then  if  we  have  a  and  b  we  can  compute  x,  but  also  if  wc 
have  x  and  a  we  can  compute  B.  It  has  been  noted  that  in  causal  reasoning  people  do  not  use  equations  in  all 
possible  ways  [diSessa,  1 98 A][ R iley ,  1981].  Only  certain  directions  of  information  How  intuitively  correspond 
to  causal  changes.  1  propose  the  following  causal  reeled iicss  hypothesis: 

Changes  in  physical  situations  which  are  perceived  as  causal  are  due  to  our 
interpretation  of  them  as  corresponding  either  to  direct  changes  caused  by  processes  or 
propagation  of  those  direct  effects  through  functional  dependencies. 

This  section  will  attempt  to  justify  that  hypothesis. 

hirst.  I  propose  that  causality  requires  some  notion  of  mechanism.1  Imagine  an  abstract  rectangle  of 
a  particular  length  and  width.  If  we  imagine  a  rectangle  that  is  longer,  it  will  have  greater  area.  There  is  no 
sense  of  causality  in  the  change  from  one  to  the  other.  If  however  wc  imagine  the  rectangle  to  be  made  of 
some  elastic  material  and  we  bring  about  the  increased  length  by  stretching  it.  then  we  are  comfortable  with 
saving  "the  increase  in  length  causes  the  area  to  increase".  QP  theory  asserts  that  processes  arc  the 
mechanisms  that  directly  cause  changes.  The  quantities  that  can  be  directly  influenced  by  processes  arc  in 
some  sense  independent  parameters,  because  they  arc  what  can  be  directly  affected.  All  other  quantities  are 
dependent,  in  that  to  affect  them  some  independent  parameter  or  set  of  independent  parameters  must  be 
changed.  1'his  suggests  representing  the  relationships  between  parameters  for  causal  reasoning  in  terms  of 
functions  rather  than  constraint  relations. 

Some  examples  will  make  this  clearer,  as  w-cll  as  emphasizing  that  the  point  is  not  academic.  In 
generating  explanations  of  physical  systems,  it  is  often  useful  to  characterize  how  the  system  responds  to  some 
kind  of  change  (this  variety  of  qualitative  perturbation  analysis  was  invented  by  de  Kleer.  who  calls  it 
Inert  mental  Qualitative  Analysis,  ahrevialcd  IQ)-  One  way  to  perform  IQ  analysis  is  to  model  the  system  by  a 
constraint  network,  in  which  the  relationships  are  modeled  by  "devices"  that  contain  local  rules  that  enforce 


1  In  its  most  general  form,  this  proposal  is  not  new  ([Bunge.  1979)  surveys  various  proposals  concerning  the 
nature  of  causality ).  l  or  example.  [Ileise.  1975)  proposes  operators  as  a  mechanism  Out  underlies  all  causal 
relations.  I  he  proposal  presented  here  is  more  specific. 
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the  desired  semantics.2  The  values  of  quantiucs  arc  modeled  by  the  sign  of  their  change  -  increasing, 
decreasing,  or  constant.  To  perform  an  analysis,  a  value  corresponding  to  a  hypothesized  change  is  placed  in  a 
cell  of  the  constraint  network  representing  tire  system.  The  rules  associated  with  the  constraint  network  are 
then  used  to  deduce  new  values  for  other  cells  in  the  network.  The  propagation  of  information  models  the 
propagation  of  changes  in  die  system,  with  dependency  relationships  between  die  cell  values  corresponding  to 
causal  connections.  For  example,  if  the  value  of  cell  A  was  used  to  deduce  die  value  of  cell  B,  we  would 
interpret  dus  as  "The  change  in  A  caused  the  change  in  8”.  Figure  43  illustrates  fragments  from  two 


Fig.  43.  Constraint  representation  of  relationships 

In  the  constraint  networks  below,  the  boxes  (cells)  denote  quantities.  The  relauonship  between  the 
parameters  is  expressed  by  a  multiplier  constraint  connecting  them. 

(a)  is  drawn  from  die  model  for  a  piece  of  "stuff"  used  to  represent  a  student’s  understanding  of  heat 
exchangers. 

(b)  is  draw  n  from  a  model  of  a  kidney  to  be  used  in  explaining  the  syndrome  of  inappropriate  secretion  of 
anu-diarrctic  hormone  (SIADH). 

Correct  causal  argument:  "The  increasing  heat  causes  the  temperature  to  rise" 

Incorrect  causal  argument:  "The  increasing  heat  causes  the  amount  of  fluid  to  rise" 


(a) 


(b) 


2.  These  examples  arc  drawn  from  systems  implemented  in  CONI  .AN  [Forbus.  1 98  lc|.  a  constraint 
language.  I  lie  graphical  notation  for  constraint  networks  is  similar  to  logic  diagrams,  except  that  "terminals" 
arc  given  explicit  names  and  die  "devices"  arc  multi-functional.  IT.c  technique  described  here  is  a 
simplification  of  de  Klccr  s  algorithms,  winch  arc  more  subtle.  However,  the  models  in  [dc  Klcer,  1979] 
sometimes  used  directional  rules  rather  dian  constraint  laws,  aldiough  no  theoretical  criteria  was  provided  for 
selecting  which  direction  in  a  constraint  law  is  appropriate  for  causal  reasoning. 
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different  models.'  The  top  fragment  suites  that  heat  is  the  product  of  the  temperature  of  the  "stuff’  and  die 
amount  of  "stuff",  and  die  bottom  fragment  is  the  definition  of  sodium  concentration  in  a  solution. 

In  building  a  causal  argument  it  is  possible  to  reach  an  impasse  -  a  quantity  receives  a  value,  but  no 
fin  liter  \  allies  can  be  computed  unless  an  assumption  is  made.  The  safest  assumption  is  dial,  unless  you  know 
otherwise,  a  quantity  doesn't  change.  Ihe  problem  lies  in  determining  which  quantity  to  make  the 
assumption  about.  Suppose  we  assume  that  the  amount  of  stuff  is  constant.  Then  we  would  conclude  that  an 
increase  in  heal  causes  an  increase  in  temperature,  which  makes  sense.  However,  suppose  we  assume  instead 
that  the  temperature  remains  constant.  We  are  left  with  the  conclusion  that  an  increase  in  heat  causes  the 
amount  of  stuff  to  decrease!  Barring  state  changes,  this  does  not  correspond  to  our  ideas  of  what  can  cause 
what.  In  the  second  fragment  the  problem  is  more  serious  -  increasing  sodium  will  cause  the  amount  of  w'ater 
to  increase,  if  the  rest  of  die  kidney  is  working  as  it  should!  To  do  this  requires  a  complicated  feedback 
mechanism  that  is  triggered  by  detecting  an  increased  sodium  concentration,  not  by  the  definition  of 
concentration  itself. 

The  problem  lies  in  the  ontological  impoverishment  of  the  constraint  representation.  Temperature 
and  concentration  arc  not  directly  influenced  by  processes  (at  least  in  most  people's  naive  physics)  -  physically 
they  are  depauh  ni  variables,  and  thus  arc  not  proper  subjects  of  assumptions.  Amount  of  stuff,  on  die  other 
hand,  can  be  directly  affected,  so  assuming  it  does  not  change  will  avoid  generating  ill-formed  causal 
arguments.  Figure  44  illustrates. 

Of  course,  the  proper  assumptions  to  make  concern  what  processes  arc  active  and  how  influences  are 
resolved.  Jf  we  do  not  explicitly  represent  processes,  we  can  only  assume  facts  about  quantities.  If  ivc  assume 
<i  quantity  is  constant  and  later  discover  that  assumption  is  wrong,  we  are  left  in  die  dark  about  why  that 
assumption  was  wrong.  For  example,  if  the  amount  of  stuff  turns  out  not  to  be  constant,  we  can  look  for  fluid 
flows  o  state  changes  to  explain  why  it  isn’t.  Since  processes  tend  to  have  more  than  one  effect,  there  is  some 
chance  that  the  contradiction  can  lead  to  discovering  more  about  the  system  radicr  than  just  being  a  bad 
guess. 


3.  These  model  fragments  are  drawn  from  an  attempt  to  implement  the  model  of  a  student’s  understanding 
of  a  heat  exchanger  (described  in  [Williams,  ct  al,  1 983])  and  an  early  version  of  the  kidney  model  described 
in  [Asbell,  1982], 
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Kiu.  44.  Model  fragments  with  possible  proceses 

Here  are  die  models  from  the  previous  figure  with  die  quantities  annotated  with  the  (likely )  processes  that 
might  a  fleet  them.  Note  that  certain  quantities  (temperature,  concentration)  cannot  be  directly  changed. 
These  arc  dependent  quantities,  and  should  not  be  the  subject  of  assumptions  in  building  causal  arguments. 


(a) 


(b) 


5.3  Qualitative  proportionalities  revisited 

The  previous  section  proposed  that  functional  dependence  is  central  to  die  kind  of  "incremental" 
causality  dial  people  find  useful  in  reasoning  about  the  physical  world.  As  discussed  previously,  developing  a 
theory  of  observation  should  be  a  goal  of  naive  physics.  One  use  of  observation  is  to  interpret  measurements 
in  terms  of  theories  ([Forbus.  1983b]).  but  another  role  for  observation  is  in  developing  physical  theories. 
While  this  problem  has  been  studied  before  (c.f.  [l.angley,  1979]),  die  target  representations  have  been 
equations.  As  a  result  he  learning  procedure  has  relied  on  numerical  data  and  cannot  build  dieoncs  around 
weaker  information.  Learning  constraint  laws  also  differs  from  learning  causal  connections.  As  noted 
previously,  an  equation  carries  only  part  of  what  wc  know  about  a  domain.  Constructing  a  learning  dicory  for 
physical  domains  will  require  ways  to  learn  process  descriptions  and  causal  connections. 

One  way  to  learn  about  a  system  is  to  "poke"  it  and  vec  what  it  docs.  I  hc  observed  behavior  can  be 
used  to  make  conjectures  about  causal  connections  between  the  parts  of  the  system,  and  further  experiments 
can  be  made  to  test  the  conjectures.  Ilns  requires  some  notation  to  express  die  IocjI  caus.il  connections 
conjectured  on  die  basis  of  these  simple  observations.  This  requirement  helped  motivate  die  definition  ofoeg 
(see  Section  2).  which  asserts  that  a  functional  dependence  exists  between  two  quantities.  If  whenever 
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parameter  a  in  a  system  is  increased  parameter  b  increases,  the  result  can  be  expressed  as: 

8  oc0^  A 

A  physical  explanation  for  the  dependence  comes  from  writing  the  oc^  within  the  scope  of  a  predicate,  an 
individual  view,  or  a  process. 

More  powerful  statements  about  a  system  or  domain  will  require  extensions  of  °c^.  To  sec  what  is 
involved,  consider  the  analogous  situation  of  learning  how  an  old-fashioned  typewriter  works.1  If  die  space 
bar  is  pushed,  the  carriage  will  move  to  the  left,  fins  is  analogous  to  the  kind  of  statement  that  can  be  made 
with  cCq.  But  lots  of  other  things  can  happen  to  move  the  carriage,  including  all  of  the  letter  keys.  Ihus  it 
would  be  useful  to  be  able  to  state  that  we  know  alj  of  the  potential  influences  (at  least,  w  ithin  the  current 
grasp  of  the  situation)  on  some  particular  parameter.  Suppose  also  that  vve  just  wanted  to  move  the  paper  up 
without  changing  anything  else.  The  return  bar  would  move  die  paper  up,  but  before  doing  so  would  return 
the  carriage  to  the  right.  Being  able  to  say  diere  arc  no  (known)  intervening  parameters  is  dicn  also  a  useful 
ability. 

To  sec  how  these  notions  can  be  expressed,  consider  the  collection  of  relations  diat  hold  at  some 
instant  in  time.  Tor  any  quantity,  the  oc^  statements  relevant  to  it  can  be  thought  of  as  a  tree  with  die 
dependent  quantity  at  the  root  and  the  "independent"  quantities  at  die  leaves.  A  plus  or  minus  denotes  the 
sense  of  the  connection  (whether  or  not  it  w  ill  reverse  die  sign  of  the  change  in  the  input).  Thus 

Qo  «q  Qi 

only  specifies  that  Q0  is  on  some  branch  "above"  Qr 

Figure  45  illustrates  such  a  dependency  tree.  Suppose  we  arc  trying  to  cause  Q0  to  change.  If  we 
don’t  want  to  change  q2,  then  q3  or  Qj  arc  our  only  choices.  We  need  a  way  to  express  that  (at  least  within  our 
knowledge  of  the  situation)  diere  arc  no  intervening  parameters.  To  say  this,  we  use 
ocg-iranediate(Oo.  Oj) 

which  can  be  modified  by  +  or  -  as  before,  oc^-jmmediate  adds  a  single  link  to  the  tree  of  dependencies. 
Another  problem  is  to  find  all  the  ways  to  bring  a  change  about,  or  to  prove  dial  changing  one  thing  won’t 
cause  a  change  in  some  other  quantity  of  interest.  We  do  diis  by  stating  that  a  particular  collection  of 
quantities  together  "closes  off  die  tree  -  there  will  be  exaedy  one  quantity  for  each  branch.  Our  notation 
will  be 


ocq-al 1 ( <quan t  i  ty>  ,  <plus-set>,  <m1nus-sat>) 

which  means  that  there  is  a  function  which  determines  the  quantity,  relics  on  the  quantities  in  the  two  sets 
solely,  is  strictly  increasing  in  its  dependence  on  the  quantities  in  the  plus-set.  and  is  strictly  decreasing  in  its 
dependence  on  the  quantities  in  die  minus-set.  if  a  quantity  is  not  mentioned  in  a  cc^-all  statement,  then 
cidier  ( I )  it  is  irrelevant  to  the  quantity  of  interest,  (2)  it  depends  on  some  quantity  in  die  “g-all  statement 
(above  the  slice  of  the  tree  it  represents),  or  (3)  some  quantity  in  the  oc^-all  statement  depends  on  it.  By  ruling 


I.  This  is  not  proposed  as  a  serious  example  because  the  quantity  definitions  and  would  apply  only  in 
some  very  abstract  sense. 
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Fij".  45.  A  tree  of  functional  dependencies 


°0 

/  \ 

O, 

03  Q4  °5 


out  the  other  two  possibilities,  independence  can  be  established. 

As  a  rule  ocQ  statements  will  not  hold  for  all  time.  In  the  typewriter  analogy,  imagine  die  carriage  at 
the  end  of  its  travel  -  Hitting  the  space  bar  will  no  longer  result  in  movement.  More  to  the  point,  consider  qq 
given  by: 

Q0  •  (a  -  b  •  Q2)  •  Qj 
Note  that: 

if  a  >  b  •  Q2,  Qo  aQ+  Qi 

a  -  b  •  Q2,  -1  Q0  aeg  Qj 

a  <  b  •  Q2,  Qo  «q-  Qi 

In  the  ease  of  equality.  Q0  and  Qj  arc  not  related  at  all.  and  in  the  other  two  eases  the  sign  of  the  function 

connecting  them  is  different.  Thus  the  collection  of  statements  that  are  true  for  a  system  can  vary  as  a 
function  of  die  values  of  the  quantities,  which  is  why  they  usually  appear  widiin  some  individual  view  or 
process.  The  idea  of  a  mode  of  a  system  in  "real"  physics  roughly  corresponds  to  particular  process  and  view 
structures  which  hold  during  the  system’s  operation. 

5.4  Differential  qualitative  analysis 

The  idea  of  a  comparison  in  IQ  analysis  suggests  a  complementary  qualitative  reasoning  technique. 
IQ  analysis  concerns  the  relationship  between  two  situations,  one  of  which  is  the  direct  result  of  things 
happening  in  die  other.  Another  ease  of  interest  concerns  situations  that  arc  just  slightly  different  from  one 
another  --  an  "alternate  world"  interpretation.  For  instance,  we  often  have  an  idea  of  the  different 
consequences  that  would  result  if  something  were  changing  a  bit  faster  --  if  we  put  the  heat  up  on  the  stove 
the  water  in  the  kettle  would  boil  sooner,  and  if  our  arm  were  quicker  the  sene  would  have  been  returned. 
Such  inferences  arc  essential  in  debugging  and  monitoring  execution  of  plans  that  involve  physical  action,  and 
in  performing  sensitivity  analyses  to  evaluate  a  proposed  design.  Ihc  language  needed  to  express  such 
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conclusions  is  in  part  the  same  as  that  used  in  IQ  analysis  --  amounts  arc  either  the  same,  increased,  decreased, 
or  indeterminate  as  compared  with  the  old  situation.  Answering  these  kinds  of  questions  will  be  called 
differential  quolilolive  analysis. 

I  et  us  consider  a  situation  sr  If  we  can  get  a  new  situation  s2  by  changing  a  single  ordering  in  or 
by  changing  the  status  of  a  single  process  or  view  instance  in  Sr  we  will  call  s2  an  alternate  of  Sj.  There  arc 
two  kinds  of  changes  that  may  occur  as  a  result  of  perturbing  sr  The  first  kind  arc  changes  in  quantities,  as 
noted  above.  Second,  die  process  history  for  the  situation  itself  may  change,  apart  from  any  changes  made  to 
define  s2  in  the  first  place.  An  example  would  be  punching  a  hole  in  the  bottom  of  a  kettle,  which  could  let 
all  the  water  drain  out  before  it  it  boils,  hven  changes  in  orderings  can  lead  to  further  changes  in  the  histories 
of  the  individuals  involved  --  c.g.,  if  we  reduce  the  intensity  of  a  flame  but  still  turn  it  off  in  five  minutes, 
boiling  may  not  occur. 

I  et  DQ(q,  s  j,  s2)  for  some  number  n  be  the  sign  of  the  difference  between  two  alternate  situations 
Sj  and  s2.  Then  the  inequality  order  between  them  defines  DQ  values,  as  follows: 

(M  n  Sj)  >  (M  n  s2)  «-  DQ( n ,  S1,  S2)  ■  -1 

(M  n  Sj)  <  (M  n  S2)  «-*  DQ{n,  S1,  S2)  •  1 

(M  n  Sj)  -  (M  n  S2)  ~  DQ{n .  St,  S2)  •  0 

The  inequality  orderings  for  instants  must  of  course  be  extended  to  apply  over  intervals.  For  equality  this  is 
simple: 

V  rij,  n2  €  number  V  i  €  time 

(M  nj  i)  <  (N  n2  i)  =  V  ij  (  during(i)  (M  nj  ij)  *  (M  n2  1j) 

F'or  die  other  eases  the  choice  is  less  clear.  The  strongest  version  of  greater-than  is  having  it  hold  over  every 
instant  in  the  interval: 

Vnj,  n2  €  number .  i  €  interval 
(Mnj  i)>  (Mn2  1 )  a 

(V  i1  €  during(i)  (M  nj  ij)  >  (M  n2  1 j ) ) 

however,  the  following  w  ill  also  suffice: 

V  Nj,  N2  €  number .  i  €  interval 
(M  nj  i)  >  (M  N2  i)  = 

[(3  ij  d  during(i)  (M  Nj  ij)  >  (M  N2  ij)) 

A  (V  ij  t  during(i)  (M  Nj  ij)  <  (M  N2  Ij))] 

A  version  of  <  for  intervals  may  be  similarly  defined. 

An  episode  in  a  parameter  history  has  several  numbers  associated  with  it.  The  relationships  between 
these  numbers  allow  new  l)Q  values  to  be  determined.  Ilic  first  number  is  role.  c.g..  the  Dm  of  the  quantity 
the  parameter  history  is  about.  The  second  number  is  the  duration  of  the  interval  associated  with  the 
episode.  1  he  third  number  is  the  difference  in  die  value  measured  at  the  beginning  and  end  of  the  interval, 
which  we  will  call  the  distance. 

How  are  dicse  numbers  related?  Intuitively  we  know  that  if  the  rate  increases  or  decreases,  die 
duration  of  time  will  decrease  or  increase,  or  the  distance  the  value  moves  will  increase  or  decrease  for  the 
same  dotation.  Implicit  in  this  simple  intuition  is  the  restriction  that  die  rate  is  constant  during  the  interval, 
i.c..  that  the  function  defining  the  change  of  die  quantity  is  linear  and  time  invariant.  This  often  is  not  die 
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case,  so  wc  must  require  that  either  the  beginning  or  the  end  of  the  two  episodes  being  compared  arc  the 
same.  If  w  e  apply  1  )Q  analysis  only  to  alternate  situations  as  defined  above  this  restriction  will  be  satisfied. 

With  these  assumptions,  the  1)Q  value  of  the  distance  is  just  die  product  of  die  l)Q  values  of  die  rate 
and  duration.  Thus  we  can  draw  conclusions  such  as  "If  the  rate  is  higher  dien  over  the  same  time  the 
distance  traveled  will  he  greater."  and  "If  the  duration  is  shorter  and  die  rate  is  the  same  dien  the  distance 
traveled  will  be  less."  These  inferences  are  illustrated  in  figure  46. 

1'he  direct  historical  consequences  of  these  changes  can  be  characterized  by  dicir  effects  on  limit 
analysis.  Consider  a  collection  of  quantity  hypotheses  for  a  p-component.  Recall  dial  each  hypothesis 
concerns  a  possible  change  in  suite,  brought  about  by  non-zero  Ds  values  that  cause  changes  in  quantity 
conditions.  Suppose  a  particular  quantity  hypothesis  is  chosen  as  representing  what  actually  occurs.  This 
means  the  change  it  stands  for  happens  before  the  changes  represented  by  die  other  hypodicses.  If  in  an 
alternate  situation  this  hypodiesis  has  an  increased  duration  (a  DQ  value  of  1)  or  one  of  the  other  limit 
hypotheses  has  a  decreased  duration  (a  DQ  value  of -1),  dien  in  fact  a  different  change  could  occur.  Once 
again,  the  weak  nature  of  our  information  prevents  us  from  actually  deciding  if  a  different  change  would 
occur  -  but  wc  at  least  know  diat  it  is  possible  in  these  circumstances. 


Fig.  46.  Differential  qualitative  analysis 

Differential  qualitative  analysis  answers  questions  about  how  a  situation  would  change  if  parts  of  it  are 
perturbed. 


;dafinition  of  distance 

V  S  €  episode  distan;e(0.  S)  «  (M  A[QJ  end(S))  -  (M  A[Q]  start(S)) 

Suppose  we  have  alternate  situations  and  Sj.  with  a 
quantity  0  in  both  of  them. 

DQ[distance(Q,  S),  Sj.  S2]  *  DQ[rate(Q,  S),  Sj,  S 2 3  *  DQ[duration(S) .  Sj,  S2] 

Then  assuming  time( start(Sj ) )  *  time{ s tart(S2) ) . 

DQ[rate(Q,  S).  Sx.  S2]  ■  1  A  DQ[durat1on(Q) .  Slt  S2]  ■  0 
=>  DQ[distance(Q,  S).  Sj,  Sg 3  ■  1 

0Q[rate(Q,  S),  Sj.  S2]  ■  -1  A  DQ[d1stance(Q.  S).  Sj.  S2]  •  0 
=»  DQ[duration(S) ,  Sj,  S2]  ■  1 

i.e.,  "If  N  is  going  faster  then  it  will  get  farther  in  the  same  time"  and  "If  N 
is  going  slower  it  will  take  longer  to  go  the  same  distance." 
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5.5  Measurement  interpretation 

One  role  of  a  naive  physics  is  to  provide  explanations  for  observed  events.  A  particularlv  simple 
form  of  this  problem  is  to  interpret  the  changes  one  secs  when  taking  a  quick  look  at  a  system,  explaining 
observed  parameter  changes  in  terms  of  die  processes  that  cause  them.  Consider  die  three  containers 
illustrated  in  tlgurc  47.  If  we  sec  that  the  level  of  water  in  G  is  dropping,  then  there  arc  several  possible 
explanations,  bui  if  we  also  note  that  the  level  in  r  is  dropping  as  well,  dien  both  changes  must  be  caused  by 
water  flowing  from  r  to  G  and  dien  from  g  to  h  (assuming  wc  know  all  die  pipes  Uicrc  arc  and  diat  liquid  flow 
is  the  only  kind  of  process  that  can  occur).  Here  wc  will  present  a  theory  of  measurement  interpretation  that 
solves  dus  class  of  problem.  Appropriate  notions  of  measurement  and  interpretation  arc  defined,  including 
an  account  of  error  due  to  limited  resolution.  Design  considerations  for  interpretation  algorithms  arc 
discussed,  although  a  description  of  the  implemented  algorithm  is  postponed  until  chapter  9. 

5.5.1  Measurements 

First  wc  must  specify  what  kinds  of  things  can  be  observed  in  principle  and  dien  add  further 
conditions  to  specify  what  can  be  observed  in  fact.  We  start  by  assuming  that  a  collection  of  individuals  is 
known.  The  closed  world  assumption  that  dicse  individuals  arc  the  only  (relevant)  individuals  is  called  the 
armchair  assumption.  Wc  will  also  assume  the  existence  of  a  partial  decision  procedure  for  determining 
whether  or  not  relationships  defined  outside  QP  dicory  (such  as  Mum-Connection)  hold,  in  order  to  confirm 
preconditions.  To  state  that  wc  have  ascertained  whether  or  not  a  fact  is  true  via  observation,  we  will  write: 

Observed(<yari>,  <time>,  M ) 

where  \f  is  the  instrument  (such  as  our  eyes)  used  in  the  observation. 

Within  the  QP  ontology,  the  kinds  of  facts  that  can  be  observed  are  inequalities,  the  values  of  signs. 


Fig  47.  A  measurement  interpretation  problem 

Suppose  wc  sec  the  level  of  water  in  g  dropping.  What  could  be  causing  that?  What  could  be  causing  the 
level  of  water  in  G  and  in  t  to  drop? 


and  occurrences  of  processes.  Wc  will  say 
Observable(Q,  8,  M) 

when  quantity  (or  part  of  a  quantity  such  as  its  Ds)  Q  of  object  B  can  be  observed  with  instrument  A/. 

The  criteria  for  a  type  of  process  being  observable  often  reduces  to  the  observability  of  a  particular 
kind  of  quantity  and  the  uniqueness  of  that  process  (with  respect  to  the  rcasoncr's  process  vocabulary)  in 
influencing  it.  A  change  in  position,  for  example,  is  by  definition  die  result  of  motion.  Thus  whenever  wc  see 
a  change  of  position  wc  arc  seeing  the  result  of  a  motion  process.  A  process  may  also  be  observable  because  it 
produces  some  other  observable  effect,  such  as  bubbles  which  exist  in  turbulent  flow  and  boiling.  In  cither 
case,  wc  will  say 

Observabl e-PI ( PI ,  A/) 

if  pi  can  be  observed  to  be  active  or  inactive  with  instrument  A/.  Wc  will  say 
Measured(Q,  B,  t.  A/,  <va/ue>) 

when  measuring  Q(B)  with  A/  at  (during)  time  t  yields  the  value  given.  In  keeping  with  die  quantity  space 
representation,  measuring  a  number  or  magnitude  yields  an  inequality  and  measuring  a  sign  yields  one  of  -l, 
o,  or  l.  For  example,  die  statments 

Measored( Asf pressure] ,  WA,  tj.  A/.  1) 

Measured( A[pressure] ,  WA,  tj,  A/,  A[pressure(WA) ]  •  A[pressu  re(WB)]) 

say  that  the  pressure  of  wa  was  measured  to  be  greater  than  zero  and  equal  to  the  pressure  of  wb  at  time  tr 
Measuring  derivatives  will  be  discussed  shortly. 

Wc  wish  to  consider  a  wide  variety  of  instruments  as  measuring  means,  such  as  eyes  and  gauges.  A 
comprehensive  theory  of  error  lies  outside  die  present  discussion,  but  modeling  the  potential  for  error  due  to 
limited  resolution  is  straightforward.  The  essence  of  die  limitation  is  diat  when  two  things  arc  "very  close"  a 
particular  A/  might  not  distinguish  them  (for  signs,  we  arc  seeing  if  the  number  is  "very  close"  to  die  special 
value  zero).  For  each  measuring  means,  object,  and  quantity  type,  let  dicre  be  a  function  Omin  such  diat  two 
values  arc  considered  distinguishable  if  and  only  if  the  magnitude  of  dicir  actual  difference  is  greater  than 
Omin.  In  other  words, 

Oistinguishable(Q.  B,  Ql,  t,  M) 

—  m[(M  Q(B)  t)  -  (M  Ql  t)]  >  0m i n ( Q ,  B,  M) 

Onin  will  be  chosen  according  to  the  particular  physics  and  instrument  being  modelled;  diis  particular  form  is 
chosen  for  simplicity.1  A  measured  equality  might  be  wrong  due  to  limited  resolution: 


I.  In  particular,  this  form  of  Omin  is  simpler  than  just  noticable  difference  in  psychophysics,  because  the  latter 
also  depends  on  the  value  of  the  quantity.  A  taxonomy  of  possible  forms  for  Omin  is  outside  the  scope  of  this 
discussion. 


Forbus 


-89- 


QP  theory 


Measured(Q,  8,  t,  M,  {•  Q(B)  Ql)) 

=>  [(M  Q(B)  t)  ■  (M  Ql  t) 

V  —i  Distinguishable^,  B,*  Ql,  t.  A/)] 

and  if  wc  measure  a  difference,  then  there  really  is  a  difference: 

Measured(Q,  B,  t.  A/,  (>  Q  Ql))  => 

C { M  Q(B)  t)  >  (M  Ql  t) 

A  Di s t i ngu i shabl e(Q ,  B,  Ql,  t.  A/)] 

A  similar  statement  can  be  made  for  <.  In  measuring  signs  wc  arc  examining  inequalities  with  Ql  *  zero,  so 
lack  of  resolution  will  show  up  as  a  sign  value  of  0. 

Measuring  change  is  particularly  important.  First  consider  changes  :n  a  quantity  over  some  interval. 
Wc  must  distinguish  the  values  of  the  same  quantity  measured  at  two  different  times,  so  the  relation  wc  are 
looking  for  depends  on  the  quantity  type,  the  object,  the  measuring  means,  and  an  interval.  Wc  will  say 

D-dist.inguished(Q.  B,  I,  A/) 

(read  "differentially  distinguished")  exactly  when 

m[(M  Q(B)  start(I))  -  (M  Q(B)  end(I))] 

>  Omin(Q,  B,  A/) 

Since  wc  arc  using  Allen’s  ontology  for  time,  an  instant  is  simply  a  very  short  interval.  Thus  our  criteria  for 
observing  changes  over  intervals  can  serve  for  measuring  derivatives.  However,  capturing  lack  of  resolution 
becomes  more  complicated: 

Measured(Ds[Q] ,  B,  I,  A/,  0) 

=>  (V  t  €  during(I)  (M  Os[Q(B)]  t)  -  0) 

V  -i  D-distinguished(Q,  B,  I,  M) 

V  -I  Constant-Sign(0[Q(B)i,  I)] 

This  axiom  says  that  if  wc  measure  the  change  of  a  quantity  over  an  interval  and  find  it  constant,  then  either  it 
really  isn't  changing  (i.c.,  o$  value  of  0),  it  is  changing  too  slowly  to  be  distinguishc  '  ,  our  instrument  A/,  or 
it  has  been  changing  faster  than  wc  can  measure.  Even  when  the  measured  value  is  non-zero,  the  sign  may 
not  have  been  constant  over  the  interval: 

Measured(Os[Q] ,  B.  M,  I,  <1  or  -l>) 

=>  [(V  t  €  during(I)  (M  Ds[Q(B)]  t)  *  <1  or  -1>) 

V  Constant-Sign(D[Q(B)],  I)] 

A  D-distinguishab1e(Q,  B,  I,  M) 

Like  the  zero  ease,  this  axiom  states  (via  the  dh  .  ction)  that  wc  cannot  tell  if  die  quantity  was  changing 
rapidly  during  die  interval.  However,  it  also  says  Uiat  if  wc  do  measure  a  non-zero  D  value,  then  the  change 
really  is  distinguishable.  The  extension  of  distinguishability  to  intervals  of  non  zero  duration  allows  us  to  say, 
for  example,  dial  while  wc  cannot  immediately  sec  die  effect  of  evaporation  on  die  level  of  water  in  a  glass,  if 
we  looked  longer  wc  could. 
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5.5.2  Interpretations 

An  interpretation  must  explain  what  is  causing  the  changes  that  are  occuring  (including  the  special 
case  of  nothing  changing).  In  Ql’  theory  processes  arc  the  only  causes  of  changes,  so  an  interpretation  will 
include  assumptions  about  the  status  of  the  process  instances  dial  occur  between  the  individuals.  Since  more 
than  one  process  can  influence  a  quantity,  interpretations  must  also  include  assumptions  concerning  influence 
resolutions.  An  interpretation  must  be  internally  consistent,  externally  consistent,  and  sufficient.  Internally 
consistent  means  an  interpretation  assigns  at  most  one  status  to  any  process  instance  and  at  most  one  Ds  value 
to  any  quantity.  Hxternally  consistent  means  that  the  status  assignments  and  d$  values  assigned  are  consistent 
with  the  measurements.  Sufficient  means  that  every  measured  d$  value  is  explained.1 

Some  additional  structure  on  interpretations  will  prove  useful.  A  unit  cause  hypothesis  (abreviated 
UCH)  is  a  partial  interpretation  that  forces  the  assignment  of  a  particular  Ds  value  to  be  consistent  with  its 
measured  value.  Any  interpretation  which  satisfies  the  three  criteria  above  wall  be  a  collection  ofUCHs,  one 
for  each  D$  measurement,  that  is  internally  consistent.  The  /rinjluenccrsof  a  quantity  is  the  set  of  process  and 
view  instances  that  can  possibly  influence  that  quantity,  directly  or  indirectly.  The  injlucnccrs  of  a  UCH  is  die 
subset  of  the  p- influenccrs  th.it  are  active  in  that  UCH.  In  addition  to  the  status  assumptions  diat  determine 
the  influenccrs.  a  UCH  with  conflicting  influences  must  include  an  assumption  about  their  resolution.  As 
noted  above,  for  direct  influences  diis  will  take  die  form  of  an  inequality  between  (perhaps  sums  oQ  the 
influences. 

5.5.3  Computational  issues 

There  tire  two  possible  ways  to  organize  die  search  for  interpretations.  One  way  is  to  search  through 
the  possible  UCII’s  for  each  measurement  to  find  a  globally  consistent  collection,  binding  die  possible 
UCHs  for  a  quantity  is  simple.  The  set  of  p-infiucnccrs  can  be  computed  from  die  process  descriptions 
associated  with  the  process  instances,  and  each  possible  subset  of  influenccrs  can  be  checked  to  sec  if  it  can  be 
resolved  consistently  w  ith  the  measured  value.  However,  die  potential  number  of  UCH's  can  be  quite  large. 
Suppose  we  measure  a  quantity  and  find  it  is  increasing.  liven  if  we  have  p  process  instances  that  can  provide 
a  positive  influence  and  n  dial  can  provide  a  negative  influence,  there  are 

(2P  -  l)  •  (2n) 

possible  UCHs.  In  practice  this  number  will  actually  be  much  smaller,  since  the  process  instances  arc  usually 
not  independent.  For  example,  a  fluid  path  cannot  have  flows  going  in  both  directions  at  once  because  dicir 
quantity  conditions  would  conflict.  Also,  the  number  of  consistent  interpretations  will  almost  always  be  much 
smaller  than  die  product  of  the  number  of  UCHs  since  processes  ty  pically  influence  more  dian  one  quantity, 
providing  mutual  constraint.  These  facts  suggest  dial  we  organize  the  search  around  the  space  of  status 
assignments  to  process  instances  instead.  If  we  wish  a  total  interpretation  we  can  use  die  entire  collection  of 


1.  Ily  contrast,  an  interpretation  in  dc  Klccr's  QUA1.  [1979]  is  a  collection  of  device  suites  and  incremental 
changes  in  quantities,  the  latter  assumed  to  occur  sequentially  in  "mythical  time".  Despite  profound 
ontological  differences,  die  principles  defining  interpretations  presented  here  arc  inspired  by  his  work. 
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process  instance's.  Inn  if  we  want  a  minimal  interpretation  to  explain  the  measurements  wc  can  just  use  the 
union  of  the  p-mlluencers  for  the  measured  o  values.  Anv  collection  of  status  assiimincnts  that  cannot  be 
consistently  extended  by  assumptions  about  influence  resolutions  to  provide  a  L  C  l  I  for  each  Ds  measurement 
can  he  thrown  out.  and  each  extension  found  is  a  valid  interpretation. 

Several  kinds  of  knowledge  can  he  used  to  prune  die  search  space.  Process  instances  that 
correspond  to  observable  processes  could  have  their  status  determined  directly  by  observation,  or  indirectly 
by  ascertaining  the  truth  of  their  preconditions  and  quantity  conditions.  For  example,  if  we  can  sec  diat  a 
valve  in  tin  id  path  is  closed,  then  that  fluid  path  is  not  aligned  and  no  flows  can  occur  through  it. 

Once  a  collection  of  status  assumptions  is  chosen,  it  must  be  extended  to  form  a  collection  of  UCHs. 
I  here  are  several  ways  to  accept  or  rule  out  a  L’CII.  If  die  set  of  influences  can  be  resolved  then  the  UCH 
will  stand  or  fall  according  to  whether  or  not  the  resolved  D$  value  and  the  measured  value  agree.  Again,  this 
can  require  domain-specific  information:  wc  do  not  expect  that  evaporation  w  ill  immediately  cancel  out  die 
effect  of  pouring  water  into  a  cup.  Distinguishability  provides  a  means  of  ruling  out  small  changes.  For 
example,  wc  can  say: 

V  w  C  contained-! lQuid  V  pi  €  process-instance 
Inf  1 uencer s( Level (w) )  ■  {pi}  A  Process(pi)  *  Evaporation 
=»  -1  0-0  1  s 1 1 ngu 1  shed ( Leva  1 ,  w,  eyebal 1 -t ime ,  ayes) 

which  will  rule  out  evaporation  as  the  sole  explanation  for  why  we  are  seeing  the  level  of  water  in  a  glass  fall.1 

What  if  no  consistent  interpretation  exists?  Follow  ing  (Davis,  1984).  we  view  die  analysis  as  relying 
on  simplify  ing  assumptions  that  must  he  rc-analy/cd  in  such  cases,  flic  assumptions,  ordered  in  increasing 
certainty,  arc: 

1.  Any  facts  used  in  pruning  arc  correct 

2.  I  lie  measurements  arc  correct 

3.  I  he  armchair  assumption  is  correct 

4.  I  lie  process  vocabulary  is  complete  and  correct 

Other  orderings  arc  of  course  possible.  Ultimately  a  global  order  on  catagorics  of  facts  will  probably  prove 
inadequate,  since  our  strength  of  belief  can  '  ary  strongly  on  items  within  a  catagory.  For  example,  when  die 
measuring  means  is  indirect  and  the  domain  familiar,  wc  often  trust  our  theories  more  than  the 
measurements.  The  opposite  is  true  if  die  measurements  arc  direct  (sensory)  and  the  domain  unfamiliar. 


1.  Informal  observations  indicate  that  people  appear  to  use  the  following  ineffectuality  heuristic  --  if  the 
result  of  a  process  instance  is  not  distinguishable,  assume  it  isn't  acting.  The  intuition  appears  to  be  that  its 
effect  won't  make  that  much  of  a  difference  anyway  (unless  the  physical  structure  of  the  situation  leads  you  to 
believe  there  are  alot  of  them!).  I  his  heuristic  prunes  the  search  space  of  process  instances  enormously,  and  it 
seems  likely  th.it  correct  use  of  this  assumption  is  a  mark  of  an  expert  in  a  domain. 
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6.  Practice 

The  proof  of  a  pudding  is  in  the  eating,  and  die  test  of  an  AI  theory  is  whether  it  can  he  used  to 
construct  programs  that  perform  the  type  of  reasoning  the  theory  is  about.  However.  evaluating  a  theoiy  by 
examining  .1  program  that  embodies  it  can  be  tricky.  There  are  many  engineenng  decisions  which  must  be 
made  in  constructing  a  complex  artifact,  and  many  of  these  decisions  are  constrained  more  by  the 
implementation  technology  than  by  the  theory  being  tested.  Perhaps  the  best  view  is  to  consider  a  program  as 
a  piece  of  experimental  apparatus,  a  means  of  exploring  a  theory.  Sometimes  critical  expei  iments  can  be  set 
up.  but  more  often  programs  pros  ide  a  means  of  generating  phenomena. 

The  program  GIZMO  is  w ritten  in  this  spirit,  GIZMO  is  a  vehicle  for  exploi  mg  and.  developing  QP 
theory.  The  fact  that  it  works  indicates  the  theory  is  not  patently  wrong,  but  the  distance  between  it  and  a 
program  whose  competence  matches  ours  in  reasoning  about  die  physical  world  is  wide  enough  to  warrent 
caution  in  making  claims.  Given  that  caveat.  I  will  say  that  GIZMO  has  made  me  t'anly  optimistic  that  QP 
theory  will  play  an  important  role  in  constructing  powerful  and  useful  qualitative  reasoning  systems. 

The  purpose  of  the  next  few  chapters  is  to  describe  die  representations  and  algonthms  used  in 
GIZMO  in  sufficient  detail  that  a  competent  AI  hacker  could  construct  a  "QP  engine"  with  oni.  moderate 
difficulty.  The  particular  data  structures  and  programs  used  will  not  be  described  s.nce  my  goals  were 
exploratory,  speed  was  almost  always  sacrificed  to  flcxiblity.  Someone  constructing  "mdusiriul-gradc"  naive 
physics  systems  will  find  little  direct  guidencc  therein.  Although  I  have  some  ideas  on  the  subject  (see  section 
12.3.1).  developing  efficient  inference  techniques  forQP  theory  p  mains  a  problem  lor  the  future. 

GIZMO  is  a  large  program,  consisting  of  over  1.300  Zctalisp  functions  organized  into  00  tiles.  It 
includes  representations  of  objects  and  quantities,  algorithms  for  performing  the  bast.  QP  deductions,  a 
language  for  describing  domain  models,  a  "one-look"  measurement  interpretation  algorithm,  and  an 
envisioner.  The  follow  ing  chapters  describe  each  of  these  components  in  detail,  leach  part  and  each  example 
m  these  chapters  is  fully  implemented  and  runs. 

Sadly,  theory  often  outstrips  practice.  Limitations  of  time  and  computing  resources  have  prevented 
GIZMO  from  being  a  complete  embodiment  of  QP  theory.  Of  the  history  theory  presented  in  sections  2.7 
and  3.7.  only  slices  and  situations  were  implemented,  since  they  arc  all  that  has  been  needed  for  the  particular 
reasoning  tasks  examined.  Neither  encapsulated  histories  nor  hierarchial  process  descriptions  have  been 
implemented.  No  significant  external  theories  have  been  provided  to  establish  preconditions,  nor  have  any 
extension  theories  been  added  to  resolve  ambiguities.  Nevertheless,  the  reader  should  find  some  indication  of 
the  utility  of  the  theory  by  examining  what  has  been  implemented. 

Chapter  7  describes  the  details  of  the  representations  of  objects,  quantities,  individual  views  and 
processes  used  111  GIZMO.  Chapter  8  describes  the  language  GIZMO  provides  for  writing  domain  models, 
and  presents  simple  vocabularies  for  reasoning  about  fluids  and  motion  that  will  be  used  in  later  examples. 
Chapter  ')  describes  the  algorithms  used  to  implement  the  basic  QP  deductions.  Chapter  10  describes  a 
"one-look"  measurement  interpretation  algorithm,  and  Chapter  11  describes  the  envisioning  algorithm, 
including  how  the  frame  problem  is  handled. 

The  reader  who  is  uninterested  in  algorithmic  or  implementation  details  would  do  well  to  skip 
chapters  7  and  9.  focusing  instead  on  chapter  8  to  get  a  sense  of  what  the  domain  models  look  like  and  the 
examples  111  chapters  10  and  11  to  see  what  GIZMO  can  do  with  them.  To  case  the  path  for  readers 
unfamiliar  with  I  isp,  infix  notation  will  be  used  when  possible.  The  algorithms  are  expressed  in  a  restricted 
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I  neltsh  format  to  he  accessible  to  the  general  computer  science  reader.  I  or  \er.iut\.  howeser.  lisp-style 
p ; e ’ i \  n * '[,)[] o u  uil!  he  used  when  deserming  i plcincni.iLn m  details  oi  domain  models.  1  he  onl >  chapter 
win.  h  assumes  am  lamihai  it>  with  I  tsp  or  AMOK  I  )likc  languages  is  (,'hapter  S.  sri’ce  the  domain  models  do 
im  hide  i  tiles  and  occasional  pieces  of  programs.  I  he  particular  interence  engine  used,  called  I  )l  IIACI  I  .,  is 
dcsciihed  in  the  appendix. 


■  . 
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>  7.  Representing  objects,  quantifies.  and  processes 

I  his  chapter  describes  the  next  level  of  detail  for  the  representation  of  objects,  quantities,  and 
processes,  First  we  examine  how  objects,  slices,  and  situations  are  represented.  Second,  we  examine  the 
representations  of  quantities  and  relationships  between  them.  Finally,  we  summarize  the  facts  associated  with 
I  individual  v iews  and  processes. 


7.1  Objects 

I  Objects  arc  represented  by  individuals.  The  criteria  for  what  constitutes  an  individual  will  in  general 

depend  on  the  domain  being  represented.  However,  instances  of  processes  are  always  considered  to  be 
individuals.1  There  are  two  distinct  but  related  notions  of  existence.  The  first  is  logical  existence,  which 
simply  means  that  it  is  not  inconsistent  for  there  to  be  some  state  of  affairs  in  which  a  particular  indiv  idual 
exists.  A  square  circle  is  something  which  logically  cannot  exist.  The  second  notion  is  physical  existence. 

.  which  means  that  a  particular  individual  actually  docs  exist  at  some  particular  time.  Clearly  an  individual 

which  physically  exists  must  logically  exist,  and  an  individual  which  logically  cannot  exist  cannot  ever 
physically  exist.  An  example  of  an  individual  which  logically  exists  but  which  (hopefully)  never  physically 
exists  is  the  arsenic  solution  in  my  coffee  cup. 

The  predicate  individual  is  used  to  indicate  that  its  argument  is  an  individual.  Being  an  individual 
|  means  that  its  properties  and  relationships  with  other  things  can  change  with  time,  and  that  it  may  not  always 

physically  exist. 

The  relation  Exists-ln(i .  t)  indicates  that  individual  i  exists  at.  or  during,  time  t.  The  import  of 
this  relationship  is  the  creation  of  a  slice  to  represent  the  properties  of  i  at  t.  A  slice  of  an  object  B  at  time  t  is 
denoted  by  at (8.  t).  All  predicates,  functions,  and  relationships  between  objects  can  apply  to  slices  to 
indicate  their  temporal  extent.  This  means  instead  of  refering  to  the  value  of  a  number  or  part  of  number  by 
m,  i.e.. 


we  will  say 


(M  f (n)  t) 


f(at(n.  t)) 

An  interesting  issue  which  did  not  arise  in  Hayes'  original  treatment  of  histories  concerns  the 
interaction  between  existence  and  predication.  What  is  the  truth  of  a  predicate  applied  to  a  slice  when  the 
indiv  idual  is  not  believed  to  physically  exist  at  the  time  corresponding  to  that  slice?  Allowing  all  predicates  to 
be  true  of  an  indiv  idual  w  hen  it  doesn't  physically  exist  has  the  problem  that  every  fact  f  which  depends  on  a 
predicate  must  now  also  be  explicitly  justified  by  a  statement  of  existence,  such  as 


I.  For  convenience,  instances  of  individual  views  arc  also  represented  as  individuals  in  the  implementation. 
Given  their  syntactic  similarity,  this  choice  allows  most  of  die  code  and  axioms  implementing  them  to  be 
shared,  as  we  w  ill  sec  in  section  7.3. 
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<preduute '( a  t ( ob j .  t))  A  Exists-in(obj ,  t)  ^  f 

rather  than  just 

<pmlk,lle>(  a  t  (  Ob  j  .  t )  )  =>  f 

To  avoid  this,  wc  simply  indicate  that  the  truth  of  certain  predicates  which  depend  on  physical  existence 
imply  that  the  individual  docs  exist  at  dial  time,  i.e. 

Predicate(at(obj ,  t))  =>  Exists-in(obj.  t) 

This  allows  the  implications  of  the  predication  to  be  stated  simply,  while  also  providing  a  constraint  on 
existence  that  is  useful  for  detecting  inconsistencies.  However,  care  must  be  taken  when  specifying  taxonomic 
constraints,  such  as  say  ing  that  an  object  is  either  rigid  or  clastic.  If  wc  simply  assumed 

V  si  €  slice  Taxonony( Rig id( si ) .  Elastic(sl)) 

wc  would  be  asserting  the  existence  of  the  object  at  the  time  represented  by  that  slice,  since  one  of  the 
alternatives  of  the  taxonomy  must  be  true.  These  statements  must  always  be  placed  in  the  scope  of  some 
implication  which  will  guarentcc  existence,  such  as 

V  si  €  slice  Physob(sl)  Taxonomy( Ri gid( si ) ,  Elastic(sl)) 

to  avoid  inappropriate  presumptions  of  physical  existence. 

Situations  describe  a  collection  of  objects  being  reasoned  about  at  a  particular  time.  A  situation 
simply  consists  of  a  collection  of  slices  corresponding  to  the  objects  that  exist  in  it.  In  GIZMO,  the  name  of 
the  situation  serves  to  name  the  time  of  slice:  no  other  model  of  time  is  implemented.  Kach  situation  has  the 
set  of  next-situations  and  previous-situations,  which  consist  of  the  situations  that  can  lead  to  it  and  the 
situations  it  can  result  in,  respectively.  The  decision  of  what  individuals  should  be  considered  together  as  a 
situation  is  left  totally  to  the  user:  automatic  segmentation  into  p-componcnts  (sec  section  3.7)  is  not 
implemented. 

7.2  Quantities 

Wc  begin  by  describing  the  relationships  betw  een  the  parts  of  a  number,  and  describe  the  particular 
facts  about  inequalities  that  GIZMO  uses.  We  then  examine  the  language  used  to  describe  functional 
dependencies,  including  the  laws  of  qualitative  proportionalities,  correspondences,  and  explicit  functions. 
Finally  wc  describe  adders,  which  arc  used  to  sum  direct  influences  and  compute  other  aggregate  properties. 


7.2.1  Numbers 

Hie  various  relationships  between  the  parts  of  a  number,  its  magnitude,  amount,  and  sign,  are 
described  by  several  axioms.  Tor  signs,  the  following  facts  hold: 

V  sn  €  sign 

Taxononyf  sn  •  -1,  sn  •  0,  sn  •  1) 

The  Has-vai  ue  relationship  is  used  in  the  implementation  to  say  sign  <v  takes  on  the  value  <w>,  i.e., 
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(Has -Value  <s>  <val>) 


For  magnitudes. 


V  mg  €  naon i tude 

Taxonomy(mg  *  ZERO,  mg  >  ZERO) 


For  numbers. 


V  n  6  number 

s[n]  ■  0  «-»  m[n]  ■  ZERO 


7.2.2  Inequalities 

First,  we  assume  that  the  normal  inequality  relationships  >  and  <  arc  defined  over  numbers  with 
their  usual  properties,  i.c.,  they  arc  transitive,  antircficxive,  and  asymmetric. 

Next,  we  describe  die  interaction  between  inequality  relationships  and  the  parts  of  a  number.  The 
first  time  any  pair  of  numbers  n.,  n2  is  compared  (i.c.,  any  equality  or  inequality  statement  about  them  or 
their  parts  is  placed  in  the  database,  whether  or  not  that  statement  is  believed),  the  following  logical 
constraints  arc  installed: 


TaxonomyfNj  <  N2,  Nj  •  N2 .  Nj  >  N2) 
sCNj  •  -1  A  s[N2]  -  0  =>  <  N2 

s[Ni]  -  -1  A  s[N2]  -  1  =>  <  N2 

s[Nj]  •  0  A  s[N2]  ■  1  =>  <  tt2 

s[Nj ]  *  0  A  s[N2]  -  -1  =*  Nj  >  N2 

s[Nj]  •  1  A  s[N2]  •  -1  =»  Nj  >  N2 

s[Nj]  ■  1  A  s[N2]  .  0  =»  >  M2 

[(Nt  >  ZERO  A  N2  >  ZERO) 

=>  (m[Nj]  >  m[N2]  «  Nj  >  «2) 

A  (mCNj]  •  m[N2]  **  Nj  ■  «2)] 

[(Nj  <  ZERO  A  N2  <  ZERO) 

=>  (nflt}]  >  m[N2]  ♦*  Mj  <  N2) 

A  (m[Nj]  •  m[N2]  ♦*  Nj  »  N2)] 

Notice  that  conclusions  about  equality  fall  out  as  a  consequence  of  the  implications  for  the  inequality  cases 
and  the  fust  taxonomy  statement.  Constraints  that  describe  the  relationships  between  their  magnitudes 
(called  here  mt  and  m2,  respectively)  and  zero  arc  also  installed: 


mj  •  ZERO  A  ~i <  m2  •  ZERO  =>  flij  <  m2 

■  ZERO  A  m2  •  ZERO  =*  mj  •  m2 

-i  mj  •  ZERO  A  m2  •  ZERO  =>  mj  >  m2 

To  avoid  confusion  in  the  implementation  between  the  ordering  relationships  and  the  Lisp  predicates  >,  «, 
and  *,  Greater-Than  is  used  instead  of  >,  less-Than  is  used  instead  of  <,  and  Equai-To  is  used  instead  of*. 
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7.2.3  Qualitative  proportionalities 

For  a  given  quantity,  its  constrainers  is  the  set  of  quantities  to  which  it  is  cither  qualitatively 
proportional  or  inversely  qualitatively  proportional,  i.e., 

V  Qj,  Q2  €  Quantity . 

Q2  C  cons trainers(Qj )  «■  (Qj  <*q+  Q2  V  Qa  0Cg_  q2) 

Of  course,  the  members  of  this  set  will  change  over  time  with  changes  in  the  view  and  process  structures,  llic 
set  of  const  rainccs.  die  set  of  quantities  which  arc  qualitatively  proportional  or  inversely  proportional  to  it,  is 
defined  similarly.  To  simplify  printing  and  reading  routines,  is  written  as  qprop+.  or  just  qprop,  while 
ocg.  is  written  qprop-.  <*g  is  not  used  by  the  implementation  at  all. 

7.2.4  Correspondences 

Recall  that  a  correspondence  describes  how  quantity  spaces  arc  linked  across  a  qualitative 
proportionality.  For  example,  the  statement 

Correspondence  (( A[ interna  1 -force( band) ] ,  ZERO) 

(A[ length (band)] .  A[rest- length ( band) ]) ) 

sa>s  that  the  internal  force  exerted  by  an  clastic  band  is  zero  exactly  when  the  length  of  the  band  equals  its 

length  at  rest.  I  .ct  Nj  be  a  number  (typically,  the  amount  of  a  quantity)  with  constraincrs  cr  c2 . cn.  A 

correspondence  consists  of  a  list  of  pairs, 

( (N1  vl)(Cl  v2)(c2  V3)...(cn  vn+l)) 

For  a  correspondence  to  be  applicable,  at  most  one  of  the  constraincrs  can  be  different  from  the  value 
indicated  by  the  correspondence  (the  v  ,'s).  Without  loss  of  generality,  assume  that  all  but  c^  are  die  same, 
i.e., 


ci  *  v1  +  1  if  -1  1  •  1 

and  that  each  ci  is  in  the  constraincrs  by  virtue  of  being  the  amount  of  some  quantity  oi+1-  Then  the 
relationship  between  Nj  and  Vj  will  be 

ci  .  v2  =>  -  vt 

ci  >  v2  =* 

C(0i  aQ  Qz  =*  >  Vi) 

A  (Qi  aQ-  02  =>  Nj  <  Vj)] 

Ci  <  w2  =» 

[(Ql  “0  Qz  =*  Ni  <  vi) 

A  (Qi  aQ-  Q2  Ni  >  vi)]] 

Should  there  be  only  one  constrainer,  the  outer  =>'s  above  can  be  replaced  by  **. 
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7.2.5  Fxplicit  Functions 

The  consequences  of  having  the  same  function  relate  the  parameters  of  two  distinct  individuals  can 
be  expressed  via  a  correspondence.  Given  two  objects  a..  o2  and  functions  f  v  f2,...f0  that  map  from  Oj  and 
o 2  to  parameters  of  diem,  suppose  dial 

const rainers( f j(Oj) )  ■  (f2(°i) .  •  •  •  M°l)) 

A  constrainers(fi(o2))  *  2< °2 ) • • • • ^n(°2)) 

For  example,  Oj  and  o2  might  be  contained  liquids,  with  fj  being  pressure  and  f2  being  level.  If  the 
function  which  contributes  die  constrainers  is  die  same  in  both  eases  (i.e.,  is  explicitly  named  by 
function-spec  and  is  die  same  for  both  0j  and  o2),  dicn  we  can  conclude 

Correspondence( { A[f j( 0j )] ,  A[f  j(o2)]) . 

(AffztO!)].  A[f2(o2)]). 

•••.  (ACfntOj)].  A[fn(o2)])) 


7.2.6  Simple  algebra 


While  algebraic  manipulations  are  not  part  of  basic  QP  theory,  sometimes  it  proves  convenient  to 
write  a  few  algebraic  statements  to  express  relationships  in  domain  models.  For  example,  in  describing  how 
the  flow  rate  of  a  liquid-flow  changes,  we  will  write 

(0-  flow-rate  (-  (pressure  source)  (pressure  dest))) 

This  algebraic  statement  is  interpreted  as  syntactic  sugar  for  combinations  of  qualitative  proportionalides  and 
correspondences.  First,  we  assume  die  left-hand  side  of  a  Q-  (read  "quantity  equals")  statement  is  always  a 
quantity,  and  the  right-hand  side  is  a  simple  binary  combination  of  numbers  or  quantities.  We  will  use  the 
|  symbol  -->  to  indicate  diat  the  expression  on  the  left  hand  side  is  translated  into  the  expression  on  the 

right-hand  side.  The  translations  arc  as  follows: 

(Q«  <a>  <b>)  -->  (•  (A  <a>)  (A  <b>) )  A  (■  (D  <a>)  (0  <b>)) 

(A  (  +  <a>  <b>))  -->  (+  (A  <a>)  (A  <b>)) 

(D  (+  <a>  <b>))  -->  (+  (0  <a>)  (0  <b>) ) 

(A  (-  <n>  <b>))  -->  (-  (A  <a>)  (A  <b>) ) 

(D  (-  Ca>  <b>) )  -->  (-  (0  <a>)  (D  <b>)) 

(•  <a>  (♦  <b>  <c>))  -->  (+rel  <a>  <b>  <c>) 

A  (°<:q+  numb8r-of(<a>)  number-of  [<b>) ) 

A  (aQ+  nunb»r-of (<a>)  numb«r-of (<e>)) 

(•  <a>  (-  <b>  <c>))  -->  ( -rel  <a>  <b>  <c>) 

A  (aQ+  number -of (<a>)  number-of (<l>)) 

A  (ccQ.  number-of (ca>)  number -of (<e>)) 
number-of((A  <a> ))  -->  <a> 
number-of ((0  <a>))  — >  <a> 

Ihc  flow-rate  expression  above,  for  example,  would  result  in  the  assertions: 

(+rel  (A  flow-rate)  (A  (pressure  source))  (A  (pressure  dest))) 

(+rel  (0  flow-rate)  (0  (pressure  source))  (D  (pressure  dest))) 

(oc g*  flow-rate  (pressure  source)) 

(cXq.  flow-rate  (pressure  dest)) 
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The  import  of  *rei(a,  b.  c)  is: 


a  -  ZERO  «-  [(b  •  ZERO  Ac-  ZERO) 

V  (n[b]  •  m[cj  A  Oppos i te-s i gn( b  ,  c))] 

where 

V  N j ,  N2  £  number 
Oppos i te-s i gn(Nj ,  N2)  «-► 

C(s[NX]  *  1  A  s[N2]  -  -1) 

V  ( s[Nx]  -  -1  A  s[N2]  ■  1) 

The  implications  of -rei(a,  b,  c)  are: 


Correspondence( (a ,  ZERO)(b,  c)) 
Correspondence^ (a,  ZERO)  (b.  ZERO)  (c.  ZERO)) 


7.2.7  Adders 


Addition  is  the  only  arithmetic  operation  supported  by  the  implementation,  due  to  its  importance  in 
computing  the  combined  effects  of  direct  influences.  Conceptually,  an  adder  has  three  parts,  a  sum.  which  is 
a  number,  and  two  sees,  inputs  and  minus-inputs,  which  at  any  particular  time  contain  the  numbers  that  are 
the  contribution  (positive  or  negative)  to  the  sum.  1‘hc  sets  arc  determined  by  making  a  closed-world 
assumption,  in  that  die  collection  of  numbers  explicitly  known  to  be  elements  of  the  set  at  some  time  are 
assumed  to  be  all  the  members  of  the  set. 

An  adder,  whose  sole  purpose  is  to  compute  the  sign  of  the  sum,  works  as  follows.  The  inputs  and 
minus-inputs  arc  sorted  into  three  sets  according  to  their  signs  -  a  negative  number  in  the  minus-inputs  set,  for 
example,  becomes  a  member  of  the  positive  contributions.  If  all  of  these  sets  arc  empty  or  only  the  zero  set  is 
non-empty,  then  the  sum  is  assumed  to  be  zero.  If  cither  the  positive  or  negative  set  has  members,  with  the 
other  set  being  empty,  then  the  sign  of  the  sum  is  that  of  the  set  which  has  members.  If  both  the  positive  and 
negative  sets  arc  not  empty,  then  inequality  information  is  gathered  in  an  attempt  to  settle  the  sign.  Suppose 
that  the  positive  set  has  three  members  while  the  negative  set  has  two.  Ilicn  if  for  each  member  of  the 
negative  set  a  distinct  member  of  the  positive  set  can  be  found  that  is  greater  than  it,  then  the  sign  of  the  sum 
must  be  positive  because  the  positive  contributions  will  more  than  cancel  the  negative  ones.  Similarly,  if  the 
positive  and  negative  sets  arc  of  the  same  size  and  enough  equality  information  is  known  to  set  up  a  one  to 
one  mapping  betw  een  the  sets,  then  the  sign  of  the  sum  is  concluded  to  be  zero.  Only  inequalities  connecting 
numbers  are  used,  i.c..  inequalities  between  algebraic  combinations  or  functions  of  numbers  are  not 
supported. 

Associated  with  each  quantity  is  a  special  adder,  called  its  influence  adder.  Whenever  a  quantity  is 
directly  influenced,  each  direct  influence  is  considered  to  he  a  member  of  the  appropriate  input  set  (i.e.,  a 
member  of  the  plus  inputs  if  the  influence  is  positive  and  a  member  of  the  minus  inputs  if  the  influence  is 
negative).  If  there  are  any  plus  or  minus  inputs  to  the  influence  adder,  then  the  derivative  of  the  quantity  is 
constrained  to  be  equal  to  the  sum  of  the  influence  adder. 


7.3  Individual  views  and  processes 


Since  individual  views  and  processes  are  so  much  alike,  in  the  implementation  they  are  treated  as 
specializations  of  a  more  abstract  type,  the  conJitiunaliccJ description.  There  are  three  classes  of  facts  about 
condilionali/ed  descriptions  to  be  considered,  the  facts  which  define  one.  the  facts  which  hold  when  an 
instance  of  one  is  created,  and  the  facts  which  hold  when  an  instance  of  one  is  active.  Wc  examine  each  in 
turn. 

When  a  condilionali/ed  description  is  defined,  facts  describing  its  various  components  arc  created. 
The  obvious  parts  arc  the  individuals,  preconditions,  quantity  conditions,  relations,  and  (for  processes)  die 
influences  portions  of  the  specifications.  An  additional  distinction  is  made  between  two  classes  of  facts  in  die 
relations  field,  diosc  which  arc  to  he  asserted  w  hen  an  instance  is  found  (the  creation  facts),  and  those  which 
are  to  be  asserted  when  the  instance  is  active  (called,  appropriately,  the  activation  facts).  Creation  facts 
declare  individuals  introduced  by  process  and  view  instances  and  quantities  representing  dieir  continuous 
parameters  (such  as  flow  rates).  The  creation  facts  also  include  indexing  information,  such  as  die  role  each 
indiv  idual  plays  in  the  instance. 

In  particular,  recall  diat  die  individuals  field  specifies  what  type  each  individual  must  be.  Here  are 
some  important  facts  asserted  when  a  slice  of  an  instance  of  a  conditionali/cd  description  edi  is  created  for 
situation  sit: 

Ta*onony(Status(at(cdi  ,  sit).  Active).  Status( at( edi .  sit),  Inactive)) 

Exists-in(cdi,  sit)  (type  specifications  of  slices  for  edi'j  individual s> 

Status(at(cdi .  sit).  Active)  =*  Exists-in(c<ti ,  sit) 

Hie  first  fact  simply  states  that  an  instance  must  be  eidicr  active  or  inactive.  The  second  fact  says  that  an 
instance  exists  in  a  situation  exactly  when  the  individuals  it  occurs  between  exist  and  arc  of  the  appropriate 
type  (since  the  predicates  need  not  always  be  true).  Notice  that  the  instance  cannot  exist  when  one  of  the 
individuals  it  applies  to  doesn’t,  since  in  dial  case  the  type  predicates  for  die  non-existent  individuals  won’t  be 
true  for  that  slice.  The  third  fact  enforces  the  constraint  that  the  instance  must  exist  at  any  time  it  is  active. 

The  activation  facts  are  simply  the  facts  explicidy  mentioned  in  the  relations  and  influences  fields. 
They  arc  justified  by  die  slice  of  die  instance  being  active,  i.e.,  they  will  be  believed  whenever  the  instance  is 
active. 
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8.  Domain  models 

This  chapter  describes  GI/.MO’s  language  for  writing  domain  models  and  two  examples  of  domain 
models.  While  better  domain  models  arc  being  developed,  at  this  w  riting  these  models  arc  die  only  ones  that 
have  been  run  on  several  examples.  They  arc  quite  crude  from  the  standpoint  of  being  reasonable-fidelity 
portions  of  a  naive  physics,  but  have  been  crucial  in  developing  and  debugging  the  ideas. 

QP  theory  provides  a  framework  that  partially  specifies  a  representation  language  for  dynamical 
theories.  But  it  does  not  specify  all  of  die  details  of  that  language,  and  dierc  arc  always  a  number  of  ways  for 
such  a  language  to  be  implemented.  The  next  section  describes  the  syntactic  constructs  of  Gl/.MO’s 
particular  language  for  describing  domain  models.  The  language  provides  little  insulation  from  the 
underlying  D1  BACLH  (and  I.ISP)  foundation:  given  dial  this  language  is  still  under  active  development  this 
is  a  feature  rather  than  a  bug.  The  last  two  sections  describe  the  models  of  fluids  and  motion  diat  will  be  used 
to  illustrate  the  algorithms  and  certain  dynamical  issues  in  the  next  three  chapters. 

8.1  Specifying  the  models 

Several  kinds  of  information  must  be  specified  in  developing  a  domain  model  using  QP  theory. 
Kirst,  one  must  define  the  various  kinds  of  quantities,  predicates,  and  individuals  that  exist  in  situations  of 
that  domain.  Second,  the  processes  and  individual  views  which  comprise  its  view  and  process  vocabularies 
must  be  defined.  Finally,  a  means  of  specifying  a  particular  problem  is  needed.  The  constructs  that  serve 
each  of  these  purposes  will  be  introduced  in  turn. 

8.1.1  Defining  constants  and  facts 

Logical  constants,  such  as  water,  arc  defined  with  the  Def ineConstant  form.  General  facts  about  a 
domain  arc  expressed  with  the  Def  Fact  form. 

8.1.2  Defining  types  of  quantities 

The  form 

(DefQuantity-Type  <iypt>) 

states  that  <iype>  is  a  function  which  maps  from  individuals  to  quantities  and  from  slices  to  values.  Quantity 
types  must  be  declared  in  advance  of  their  use,  since  terms  that  describe  quantities  arc  instantiated  differently 
from  other  terms  (sec  section  14.6  for  details). 

8.1.3  Defining  predicates 

To  specify  a  one-place  predicate,  we  will  use  the  form 
(OefPredicate  <namc>  .  <body>) 

where  <name>  is  the  name  of  the  predicate  and  <txxfy>  is  a  collection  of  statements  and  rules.  The  meaning  of 
OefPredicate  is  that  the  statements  arc  held  to  be  true  as  a  consequence  of  the  predicate  being  true,  and  the 
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rules  are  defined  in  the  scope  of  an  environment  where  the  variable  ?seif  is  bound  to  the  predicate's 
argument.  For  example, 

(DefPredicate  student 

( has-1  ovu- income  ?se1f) 

(rule  ( 7 f  (:true  (graduate-student  ?self))) 

(assume  (->  ?f  (Frantic  (at  ?self  thesis-deadline))) 

’Fact-of-Life))) 

would  expand  into:1 

(rule  (:intern  (student  7self)) 

(assert  (->  (student  7self)  (has-low-income  7self))) 

(rule  ( 7 f  (:true  (graduate-student  7self))) 

(assume  (->  7f  (Frantic  (at  7self  thesis-deadline))) 

'Fact-of-Life))) 


8.1.4  Defining  types  of  individuals 

Certain  types  of  predicates  arc  used  to  specify  types  of  individuals.  On  the  whole,  these  predicates 
can  be  treated  as  above.  There  arc  two  additional  complications.  First,  an  individual  often  has  parts,  and  it  is 
useful  to  specify  these  explicitly,  especially  if  some  work  must  be  done  to  update  them  (such  as  the  set  of 
pieces  of  stuff  which  comprise  the  contents  of  a  place).  This  function  is  provided  by  extending  the  syntax  of 
DefPredicate  Slightly,  to  wit: 

(def Entity  <namt>  <paru-lisL>  .  <body>) 


1.  For  those  unfamiliar  with  AMORD  or  RUP,  a  short  note  on  rule  syntax  is  in  order. 

Pattern  variables  arc  symbols  with  a  "7"  prefix.  A  rule  trigger  has  three  parts,  a  sialemenl  variable,  a 
condition,  and  a  pattern.  In  the  trigger  pattern 

(7f  (:true  (graduate-student  7self))), 

7f  is  the  statement  variable,  :true  is  the  condition,  and  (graduate-student  7$eif)  is  the  pattern.  A  rule  can 
have  a  list  of  triggers.  The  body  of  the  rule  consists  of  code  which  is  executed  whenever  a  collection  of  facts 
which  match  the  triggers  and  satisfy  their  conditions  are  found.  Several  kinds  of  conditions  arc  provided  to 
allow  rules  to  be  used  for  different  purposes.  The  conditions  :true  and  : false  arc  satisfied  when  the 
matched  fact  is  first  believed  to  be  true  or  false,  respectively.  The  conditions  :whenever-trua, 
:whenever-fais«,  and  :whenever-change  cause  the  rule  to  be  run  every  time  the  belief  in  die  fact  becomes 
true,  false,  or  changes  at  all.  Since  most  of  the  work  in  the  rules  occurs  by  adding  clauses  to  the  TMS,  the 
most  used  condition  is  :  intern,  which  means  that  the  rule  can  be  run  as  soon  as  the  fact  enters  the  database, 
whether  or  not  it  is  believed. 

The  body  of  the  rule  is  executed  in  an  environment  where  the  statement  variables  arc  bound  to  the 
facts  which  matched  the  trigger  patterns  and  the  variables  in  the  trigger  patterns  arc  bound  to  die  expressions 
provided  by  the  match.  Ihc  forms  assume  and  assert  arc  interpreted  specially;  the  first  argument  is  die  fact 
that  will  be  placed  in  die  database,  with  the  appropriate  substitutions  made  for  the  pattern  variables.  The 
second  argument  names  die  type  of  assumption,  information  which  is  useful  for  debugging  and  backtracking. 
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<p,i'ishsi>  is  simply  a  list  of  entries.  Mach  entry  contains  the  name  of  the  part  and  a  specification  of  what  type  of 
thing  it  is.  We  will  describe  what  can  be  found  in  the  parts  list  shortly. 

The  second  complication  is  that,  as  described  in  the  previous  chapter,  the  interactions  belwce..  the 
truth  of  instances  of  this  predicate  and  existence  of  die  argument  must  be  made  explicit.  The  implementation 
has  slices  and  individuals  as  distinct  syntactic  types,  which  in  turn  arc  distinct  from  the  representation  of 
constants.  Statements  which  arc  occuranccs  of  a  predicate  defined  by  deffntity  will  do  different  tilings 
according  to  the  type  of  its  argument.  If  the  argument  of  a  predicate  is  an  individual,  die  additional  rule 

(rule  (?f  (intern  (Exists-In  7self  ?  s ) ) )  ; 7s  is  a  situation 

(assume  (->  (and  (<nam?>  7self)  ?f)  (<name>  (at  7self  ?  s ) ) ) 

' Existence-Law)) 

w  ill  be  created  to  ensure  that  each  slice  inherits  the  proper  type.1  Notice  diat  if  the  truth  of  the  predicate  will 
change  over  time  it  must  not  be  asserted  of  the  individual,  only  of  those  slices  for  which  it  is  true.  If  the 
argument  is  a  slice,  dicn  (as  mentioned  previously)  die  truth  of  diat  predicate  on  it  is  tantamount  to  believing 
the  individual  exists  at  diat  time,  i.c., 

(assume  (->  ( <name>  (at  i  sit))  (Exists-in  i  sit))  ’Existence-Law) 

If  the  argument  is  already  known  to  be  ncidicr  an  individual  nor  a  slice,  then  the  predicate  cannot  be  true  of 
it,  i.e. 

(assume  (not  (<name>  7se1f))  ’Existence-Law) 

The  parts  list  is  used  to  specify  properties  of  a  type  of  individual.  An  entry  in  die  parts  list  consists 
of  a  name  and  a  specification.  The  specification  describes  the  type  of  thing  the  part  is,  such  as  a  quantity.  A 
property  that  is  a  set  is  indicated  by  the  specification 

(set-of  (part- rtlation>) 

where  <Pan-reianon>  is  die  name  of  the  rcladonship  that  specifics  that  something  is  in  that  set.  For  example, 

(defEntity  Grad-Student  ((net-worth  quantity) 

(creditors  (set-of  has-credltor) ) ) 

(not  (Tself  creditors  NIL))) 

says  that  a  graduate  student  has  a  financial  net  worth  and  a  non-empty  set  of  creditors. 

Certain  indiv  iduals  are  best  specified  as  functions  of  other  individuals,  such  as  the  collection  agent 
assigned  by  a  creditor  to  the  case  of  a  particular  debtor.  We  will  also  use  defEntity  to  specify  die  properties 
of  diis  type  of  individual  by  allowing  the  name  to  be  a  compound  expression,  and  allowing  *•  in  the 
specifications  to  denote  dial  some  of  die  arguments  of  the  name  plays  a  particular  role  for  th.it  individual. 

1 .  For  hackers,  it  should  be  noted  diat  for  efficiency  reasons  the  actual  trigger  form  for  this  rule  is 
(?self  exists-in  7s) 

since  I  )HI)ACI  H,  like  RUP.  only  indexes  assertions  by  their  first  element  and  presumably  there  will  be  many 
more  statements  of  existence  dian  statinents  about  any  particular  individual.  Sec  the  appendix  for  more 
details. 
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Here,  for  example,  we  might  say 

(defEntity  ( col  1 ect  ion- agent  Tdebtor  ?creditor)  ((victim  (-*  ?debtor)) 

(oppressor  (-■  Tcreditor))) 

(Hassles  Tself  Tdebtor) 

(Reports-To  Tself  Tcreditor)) 

to  indicate  that  a  collection  agent  reports  to  the  creditor  and  that  the  victim  of  die  collection  agent  is  the 
debtor. 


8.1.5  Defining  relationships 


flic  def  Re l  at  i on  form  provides  a  means  of  defining  relationships  as  opposed  to  type  predicates, 
individuals,  or  compound  individuals.  Its  syntax  is: 

(  def  Rel  at  ion  </orm>  .  <body>) 

defRei  ation  is  mainly  syntactic  sugaring  for  DHBACI.K  rules,  with  <f0rm>  being  the  rule’s  trigger  pattern  and 
<b*i>>  being  the  body  of  die  rule.  Unlike  normal  DHBACI.lt  rules,  however,  certain  syntactic  transformations, 
including  those  described  in  Section  7.2.6,  arc  performed  on  the  body.  To  continue  our  (grim)  example,  we 
might  describe  the  Hassles  relationship  as  follows: 

(defReiation  (Hassles  Tcreditor  Tdebtor) 

(or  (Ptiones-Late-At-Night  Tcreditor  Tdebtor) 

( Accosts-on-Street  Tcreditor  Tdebtor) 

(Sends-Threatening-Letters  Tcreditor  Tdebtor)) 

:  just  if  i cat  ion  Predi tor -Def ini t ion) 

The  :  justification  keyword  indicates  die  symbol  (in  Uiiscasc,  Preditor-Def  in  it  ion)  that  should  be  used  as 
an  assumption  type  for  assertions  made  by  rules  created  from  this  definition  (Sec  die  DHBACI.F.  appendix 
for  an  explanation  of  how  assumption  types  are  used). 

8.1.6  Defining  processes  and  individual  views 


Processes  arc  defined  with  the  defProcess  form: 

(def Process  (forrrO  .  (ke^imrd-lisO) 

where  <fonn>  is  the  syntax  of  the  relationship  which  indicates  an  instance  of  the  process  occurs  between  its 
arguments,  and  takes  the  form  of  a  list  alternating  between  keywords  (individuals, 

preconditions,  quantity-conditions,  relations,  and  influences)  and  the  specification  of  Uiat  part  of  the 
process. 

Ihc  best  way  to  explain  defProcess  is  to  look  at  an  example.  Merc  is  a  heat-flow  process  we  will  use 


later  on: 
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(defProcess  (Heat-Flow  ?src  ?dst  ?path) 

Individuals  ((?src  (Physob  ?src) 

(Has-Quantity  ?src  Heat)) 

(?dst  (Physob  ?dst) 

( Has -Quan t i ty  ?dst  Heat)) 

(?path  (Heat-Path  ?path) 

( Heat-Connec t ion  ?path  ?src  ? d s t ) ) ) 

Preconditions  ( ( Heat  -  A 1 igned  ?path)) 

Quan t i tyCond i t ions  ( (Greater-Than  (A  (temperature  ?src)) 

(A  (temperature  ?dst)))) 

Relations  ((Local  flow-rate  (Quantity  flow-rate)) 

(Q  =  flow-rate  (-  (temperature  ?src) 

(temperature  ?dst))) 

(Greater-Than  (A  flow-rate)  2ero)) 

Influences  ( ( 1  *  (heat  ?dst)  (A  flow-rate)) 

(I-  (heat  ?src)  (A  flow-rate)))) 

I  he  first  element  of  the  process  specification  provides  a  unique  name  for  instances  of  the  process  by 
substituting  the  individual  bindings  in  die  form  provided.  In  this  case  the  form  is 
(Heat-Flow  ?src  ?dst  7path), 
and  an  instance  might  be 
(Heat-Flow  Stove  Can  Burner). 

I  lie  individuals  specification  provides  the  binding  environment  for  the  rest  of  the  description;  no  free 
variables  arc  allowed.  The  type  of  each  individual  must  be  provided  (e.g.,  Physob  and  Heat-Path)  to  constrain 
candidate  collections  of  objects  which  arc  generated  when  finding  process  and  view  instances.  Additional 
matching  criteria  can  be  provided  as  well  (the  Has-Quantity  and  Heat-Connection  statements  above)  to 
further  restrict  the  conditions  under  which  instances  arc  created.  In  theory  these  criteria  could  be  placed  in 
the  processes'  preconditions,  but  in  practice  it  is  worth  placing  them  in  die  individual  specifications  if  they 
won’t  change  during  the  course  of  reasoning,  thus  reducing  die  number  of  process  instances  which  must  be 
considered. 

Preconditions  and  quantity  conditions  arc  lists  of  statements  which  arc  interpreted  conjunctively. 
Preconditions  can  be  arbitrary  predicate  expressions,  while  quantity  conditions  must  be  cidicr  inequality 
statements  or  status  statements  (i.c.,  (Status  <>nstanct>  cactive  or  inactive;)).  While  statements  in  both 
preconditions  and  quantity  conditions  can  be  negated,  no  explicit  disjunctions  or  any  other  logical  connectives 
arc  allowed. 

ITircc  constructs  arc  provided  to  introduce  new  terms  in  the  relations  field.  Individuals  which  exist 
by  virtue  of  die  instance  being  active  arc  specified  by  introduces  or  introduce-Uniqueiy.  introduces 
indicates  that  whenever  the  instance  is  active  the  individual  will  exist,  and  introduces-uniqueiy  indicates  that 
the  individual  exists  if  and  only  if  die  instance  is  active.  Properties  of  the  instance  itself,  such  as  quantities  (in 
the  heat  flow  example,  flow-rate)  arc  introduced  with  the  Local  specification.  The  syntax  of  the  Local 
expression  is 

(Local  <name>  < specification)} 

where  <speciruauon>  is  a  predicate  expression  mentioning  die  name.  In  die  heat  flow  process  above,  for  instance, 

(Local  flow-rate  (Quantity  flow-rate)) 

indicates  that  flow-rate  is  a  function  which  maps  from  instances  of  heat  flow  to  quantities.  When 
constructing  a  slice  of  an  instance  of  a  process,  occurrences  of  die  function  name  are  replaced  by  a  term 
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representing  the  application  of  this  function  to  the  slice.  If.  for  example,  pi-o  were  an  instance  of  heat-flow 
that  was  active  in  situation  so,  then  the  following  tacts  would  be  among  those  believed: 

(1+  (heat  (at  (dst)  SO))  (A  (flow-rate  (at  PI-0  SO)))) 

(I-  (heat  (at  <sn>  SO))  (A  (flow-rate  (at  PI-0  SO)))) 

Individual  views  arc  defined  using  die  defview  form.  Its  syntax  and  interpretation  is  exactly  the 
same  as  diat  of  defProcess,  except  Uierc  can  be  no  influences  field. 


8.1.7  Limit  rules 

Limit  rules  arc  "compilations"  of  conclusions  that  GIZMO  has  reached  in  performing  limit  analysis. 
When  supplied  widi  die  model  of  die  domain,  they  often  allow  GIZMO  to  reach  the  same  conclusions  with 
much  less  effort.  Their  exact  role  in  limit  analysis  will  be  explicated  later  in  section  9.4;  for  now  we  will 
merely  describe  their  syntax. 

A  limit  rule  has  the  following  form: 

(  def  Limi  t-Rul  e  <name>  (pattern)  <body> ) 

The  rule  is  run  on  all  quantity  hypotheses  whose  description  satisfies  (pattern),  which  consists  of  a  pair  of 
numbers,  the  current  ordering  between  diem,  and  die  ordering  between  them  proposed  by  the  hypothesis. 
When  a  match  is  found  (body)  is  executed  in  an  environment  where  the  variables  in  the  patterns  are  bound  to 
what  they  unified  with.  Ihe  body  returns  two  values,  a  flag  indicating  what  action  is  GIZMO  is  to  take 
regarding  the  hypothesis  and  a  list  of  reasons  for  why  diat  action  is  appropriate.  Hie  flag  can  cidicr  be  nil, 
indicating  diat,  as  far  as  this  rule  is  concerned,  the  hypohdicsis  is  okay,  T  indicating  that  diis  particular 
hypothesis  is  inconsistent,  or  all,  indicating  that  this  hypodiesis  and  any  conjunctive  hypotheses  which 
include  it  are  inconsistent. 


8.1.8  Defining  problems 

It  is  convenient  to  have  a  means  for  specifying  the  initial  conditions  of  a  problem,  such  as  what 
individuals  exist,  what  relationships  hold  between  them,  and  what  situations  diey  arc  involved  in.  The 
defScenario  form  docs  this.  The  syntax  is: 

(def Scenario  (name)  .  (specifications)) 

The  specifications  take  die  form  of 

((key)  .  (statements)) 

where  (key)  indicates  die  type  of  specification  and  (statements)  are  the  particular  content  of  it. 

The  first  type  of  specification  is  individuals,  the  initial  set  of  individuals  in  the  scenario.  Constants 
serves  the  same  role  for  problem-specific  constants.  The  Facts  specification  provides  a  way  to  make  initial 
assumptions.  Particular  situations  are  described  within  the  in-Situation  specification;  the  first  element  is  die 
name  of  the  situation,  and  the  remaining  elements  arc  individuals  and  Facts  specifications  which  arc 
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interpreted  as  stating  that  the  individuals  named  exist  in  that  situation  and  die  facts  are  true  about  the  slices  of 
those  individuals  respectively.  Facts  that  arc  true  in  all  situations  can  be  placed  in  an  always  specification. 
Here  is  how  defScenar  10  would  be  used  to  describe  a  kettle  diat  was  always  on  a  stove,  starting  at  time  to: 

(defScenario  kettle-on-stove 
(Individuals  stove  burner  kettle) 

(Facts  (Temperature-Source  stove) 

(Physob  kettle) 

(Heat-Path  burner)) 

(Always  (Heat-Path  burner  stove  kettle)) 

(In-Situation  tO 

(Individuals  stove  burner  kettle) 

(Facts  (Greater-Than  (A  (temperature  stove)) 

(A  (temperature  kettle)))))) 


8.2  Fluids 

The  first  problem  diat  arises  in  reasoning  about  fluids  is  deciding  exactly  what  constitutes  an  object. 
In  developing  his  axioms  for  liquids,  Hayes  introduced  the  idea  of  a  "contained  liquid”,  a  piece  of  liquid 
considered  as  an  object  by  virtue  of  being  "the  liquid  in  a  place"  [Hayes,  1978b].  As  we  have  seen  previously, 
this  description  is  quite  useful  for  reasoning  about  several  of  die  processes  which  act  on  liquids  and  also 
gases.1 

However,  die  vocabulary  introduced  in  section  4.1  skirted  an  important  issue.  When  a  contained 
liquid  was  created  it  was  given  an  arbitrary  name.  To  sec  the  problem  with  that,  suppose  dicrc  is  steam  and 
w  ater  inside  a  particular  container.  Part  of  the  specification  of  boiling  is  diat  some  steam  will  be  created 
inside  die  container.  Should  boiling  occur,  how  is  the  boiling  process  to  know  whether  or  not  it  must  create  a 
new  individual,  or  merely  add  influences  to  an  individual  that  is  already  dicrc?  In  general,  how  are  we  to 
know  that  two  fiuid  individuals  arc  really  the  same? 

The  simplest  solution  seems  to  be  die  introduction  of  canonical  names  for  such  individuals.  We  will 
use  the  function  c-s  to  denote  fluid  objects,  c-s  must  depend  on  die  substance,  state,  and  container  if  we  are 
to  make  all  die  required  distinctions.  All  fluid  individuals  will  be  introduced  via  instances  of  die  (redefined) 
individual  view  contained-stuf f  being  active.  Additional  predicates  arc  defined  to  describe  die  effects  of 
state  and  die  interactions  between  state  and  containment. 

Before  we  can  talk  about  contained  stuff,  however,  first  we  must  introduce  the  types  of  quantities  we 
will  be  thinking  about  and  die  general  definition  of  pieces  of  stuff.  Here  are  the  quantities  we  will  be  using: 

(defQuantity-Type  amount-of) 

(aefQuantity-Type  amount-of-ln) 

(defQuantity-Type  heat) 

(defQuantity-Type  pressure) 

(defQuantity-Type  temperature) 

(defQuantity-Type  tboil) 


1.  However,  it  seems  the  alternate  "molecular  collection”  ontology  is  also  required  for  certain  kinds  of 
reasoning.  This  point  will  be  discussed  in  section  12.3.2. 
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( defQuanti ty-Type  flow-rate) 

(aef Quantity -Type  generation-rate) 

( oefQuantity-Type  absorbtion) 

( defQuant i ty-Type  restorative) 

(OefQuantity-Type  LeveT) 

(OefQuantity-Type  Volume) 

(OefQuantity-Type  height) 

(defQuantity-Type  (height  top)) 

(defQuantity-Type  (height  bottom)) 

(defQuantity-Type  Max-Height) 

(defObservable-Quantity  Level) 

I  he  first  group  are  the  thermodynamic  properties  we  used  in  section  4.1.  To  summari/e.  we  will  consider 
anount-of  as  "the  amount  of  stuff  there  is",  roughly,  the  number  of  molecules  in  an  individual  (we  must  use 
anaunt-of  to  avoid  confusion  with  "amount”  in  the  sense  of  part  of  a  quantity).  The  function  amount-of-in 
maps  from  a  substance,  a  state,  and  a  container  to  a  quantity  th.it  indicates  how  much  of  that  substance  in  that 
state  there  is  inside  a  particular  container.  Talking  about  amount-of-in  as  distinct  from  amount-of  is 
necessary  because  amount-of  is  a  property  of  the  piece  of  stuff,  while  amount-of-in  is  used  to  suite  part  of  the 
conditions  for  that  piece  of  stuff  to  exist.  As  before,  pressure  is  assumed  to  be  measured  from  the  bottom  of 
the  container. 

The  second  group  arc  quantities  which  will  appear  in  processes.  The  third  group  arc  quantities 
which  represent  various  geometric  properties.  For  simplicity  in  the  implementation,  quantities  which  might 
naturally  be  referred  to  as  properties  of  parts  (such  as  (height  (top  container) ))  arc  curried  to  apply  to  the 
object  itself  (such  as  ((height  top)  container)).  Finally,  level  is  also  marked  as  an  observable  quantity,  a 
fact  w  hich  will  be  used  when  performing  measurement  interpretation. 

Next  we  define  pieces  of  stuff.  This  description  is  independent  of  the  particular  criteria  of 
individuation  that  is  applied  (i.c.,  it  can  be  true  of  a  collection  of  molecules  or  of  a  contained  liquid).  Since  a 
piece  of  stuff  is  an  individual,  a  defEnt  i  ty  is  used  to  define  it: 

(defEntity  piece-of-stuff  ((amount-of  quantity) 

(volume  quantity) 

(pressure  quantity) 

(heat  quantity) 

(temperature  quantity) 

(tboil  quantity)) 

(Physob  Tself) 

(vertical  Tself) 

(Qprop-  (temperature  Tself)  (heat  Tself)) 

(taxonomy  (Liquid  Tself)  (Gas  Tself))) 

(icing  a  Physob  in  this  context  simply  provides  some  geometric  information:  the  exact  specification  of  the 
Physob  predicate  appears  below.  F.very  piece  of  stuff  will  have  the  appropriate  thermodynamic  properties 
(the  quantities  specified  in  the  parts  list),  and  the  temperature  will  always  depend  on  the  heat  of  the  stuff, 
furthermore,  the  stuff  is  cither  a  liquid  or  a  gas.  Again,  wc  will  define  these  predicates  shortly. 

I  he  approximation  of  a  temperature  source  is  sometimes  useful.  There  arc  two  ways  to  define  them. 
First,  a  normal  piece  of  stuff  can  be  used  and  made  subject  to  a  special  process,  heat-restore,  which  provides 
an  opposite  influence  to  counterbalance  any  heat  drawn  from  or  added  to  it.  A  simpler  alternative  (although 
not  as  flexible,  if  wc  wish  to  add  or  remove  this  approximation  at  will)  is  to  define  temperature-source  as  a 
new  type  of  object: 
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(defEntily  Temperature-source  ((heat  quantity) 

(temperature  quantity)) 

(physoo  7self)) 

Since,  unlike  pieces  of  stuff,  the  temperature  of  a  source  isn't  qualitatively  proportional  to  die  heat  of  the 
source,  influencing  the  heat  will  leave  the  temperature  unchanged. 

Now  we  can  describe  Contained-Stuff. 


(defView  (Contained-Stuff  p) 

Individuals  ((?c  (container  ?c)) 

(?s  (substance  ?s)) 

(?st  (state  ?st))) 

Preconditions  ( ( Can-Conta in-Subs tance  ?c  ?s  ?st)) 

Quant  1 tyCond i t ions  ( ( Grea ter-Than  (A  (Anount-of-in  ?s  7st  ?c))  ZERO)) 

Relations  ( ( Introduces-Uniquely  (c-s  ?s  ?st  ?c ) ) 

(Q-  (anount-of-in  ?s  ?st  ?c)  (amount-of  (c-s  ?s  ?st  ? c ) ) ) 

(Qprop+  (anount-of-in  ?s  ?st  ?c)  (amount-of  (c-s  ?s  ?st  ?c))))) 

In  general,  a  qualitative  proportionality  must  be  provided  when  asserting  an  equality  within  a  domain 
definition  to  indicate  the  appropriate  direction  of  causality  when  resolving  influences.  As  you  can  sec,  an 
instance  of  diis  view  will  be  created  for  every  combination  of  substance  and  state  for  each  container.  It  is 
possible  that  a  particular  container  cannot  hold  stuff  of  a  particular  type,  for  instance,  storing  nitric  acid  in  a 
copper  can.  and  this  possibility  is  represented  by  the  predicate  Can-Contain-Substance  as  a  precondition. 
The  contained  stuff  exists  exactly  when  the  instance  is  active,  as  indicated  by  the  Introduces-Uniquely 
statement. 

We  will  need  to  specify  a  few  more  properties  of  individuals  defined  as  contained  stuffs.  The 
For -si  ice  construct  is  syntactic  sugar  for  a  rule  which  triggers  when  the  individual  exists  in  a  situation  named 
by  the  first  argument  (here.  ?s  i  t).  Whenever  a  canonical  individual  exists,  it  is  a  piece  of  stuff,  in  its  defined 
state,  and  the  place  where  it  is  contains  it. 

(defentity  (c-s  Tsubstanca  7stata  7place)  ((substance  (••  7substance)) 

(state  (■*  ?state)) 

(inside  (•■  7place))) 

( For-Sl ice  7s 1 t 

(piece-of-stuff  (at  7self  7s1t)) 

( ?state  (at  Tself  7sit)) 

(Contains  (at  7place  ?sit)  (at  ?self  ?sit))) 

:code  (cond  ((eq  ?state  ’Liquid) 

(Impossible-fact  (referent  '(gas  ,7self)  T)) 

(Inpossible-fact  (referent  '  ( contained-gas  ,7self)  T ) ) ) 

((eq  ?state  ’Gas) 

(Impossible-fact  (referent  ’(Liquid  ,7se1f)  T)) 

(Impossible-fact  (referent  ' (Contained-Liquid  ,7se1f)  T ) ) ) ) 
justification  c-s-Pef inition) 

I  lie  code  in  the  specification  (indicated  by  the  :code  keyword)  indicates  that  a  contained  stuff  defined  to  be 
m  one  state  cannot  be  in  the  other.  This  information  is  used  to  reduce  the  number  of  spurious  process  and 
view  instances  introduced  when  analyzing  a  situation  (sec  section  9.2). 

Next  substances  arc  introduced.  The  nature  of  a  substance  doesn't  change  w  ith  time,  hence  they  are 
domain-specific  constants  rather  than  individuals,  for  simplicity,  we  also  assume  that  every  container  can 
hold  every  substance  in  every  state: 
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( defPred icate  substanca) 

(rule  ( ( ? f  ( : true  (Substance  7s))) 

(?g  ( : true  (Container  7c))) 

(?h  (:true  (State  7 s t ) ) ) ) 

(assert  (->  (and  7f  ?g  7h)  (Can-Contain-Substance  7c  ?s  7 s t ) ) ) 
(assert  (-»  (and  ?f  ?g  ?h)  (Quantity  (amount-of-in  7s  ?st  7c))))) 

For  example,  a  particular  substance  we  know  well  is  water: 


(Oef ineConstant  Water) 

(DefFact  (Substance  Water)) 

The  various  empirical  properties  of  water  which  distinguish  it  from  other  substances  are  not  modelled  in  this 
vocabulary. 

We  will  only  model  two  states  of  matter: 

(defPredicate  State) 

(Oef ineConstant  LIQUID) 

(Oef ineConstant  GAS) 

(DefFact  (State  LIQUIO)) 

(DefFact  (State  GAS)) 

The  next  rule  enforces  the  constraint  that  these  states  are  the  only  states: 

(rule  ((?f  (:true  (State  7s)))) 

(cond  ((memq  7s  '(LIQUIO  GAS)))  ;Okay 
(t  (assume  (not  7f)  : ABSOLUTE) )) ) 

The  :  absolute  means  the  I  MS  will  never  consider  this  assumption  as  a  candidate  for  retraction. 

Now  we  must  define  the  additional  properties  a  piece  of  stuff  has  by  virtue  of  being  in  a  particular 
suite.  Unlike  the  previous  vocabulary,  we  can  use  predicates  rather  than  individual  views  to  represent  these 
properties  because  we  arc  dealing  with  canonical  individuals,  thus  their  suite  is  always  known. 

(defEntity  Liquid  () 

(not  (Greater-Than  (A  (temperature  ?se 1 f ) )  (A  (tboil  Tself)))) 

(iff  ( Con ta ined-Stuf f  Tself)  (Contained-Liquid  7 se T f ) ) 

(Qprop-  (volume  Tself)  (amount-of  Tself))) 

(defEntity  Gas  () 

(not  (Less-Than  (A  (temperature  Tself))  (A  (tboil  Tself)))) 

(Qprop-  (pressure  Tself)  (amount-of  7self)) 

(Qprop-  (pressure  Tself)  (volume  7 se 1 f ) ) 

(Qprop+  (pressure  Tself)  (heat  Tself))) 

The  inequalities  represent  the  constraints  on  temperature  imposed  by  each  suite.  As  in  the  previous 
vocabulary,  the  negated  inequalities  are  used  to  allow  a  substance  to  be  in  cither  suite  at  a  phase  boundary. 
The  relationships  between  their  thermodynamic  properties  which  arc  independent  of  the  particular 
individuating  criteria  arc  expressed  by  die  qualitative  proportionalities. 

Since  the  individuating  criteria  Air  this  vocabulary  ensures  that  all  liquid  objects  arc  contained 
liquids,  seperating  out  the  properties  of  contained  stuff  in  particular  suites  isn't  strictly  necessary.  However, 
we  define  it  scpcratcly  for  contained-liquids  for  upward  computability: 


(defEntity  Con tained-L  iqui  d  ((level  quantity)) 

(Q-  (level  ?self)  ((height  top)  Tself)) 

(Qprop+  ((height  top)  Tself)  (level  Tself)) 

(Function-Spec  1 evel -f unc t ion 

(Qprop+  (level  Tself)  (amount-of  Tself))) 

(Correspondence  ((A  (level  Tself))  (A  ((height  bottom)  Tself))) 

((A  (amount-of  Tself))  zero)) 

(Function-Spec  p-l-function 

(Qprop+  (pressure  Tself)  (level  Tself))) 

(rule  (Tf  (:  intern  (Tself  container  T c ) ) ) 

(Q*  ((height  bottom)  Tself)  ((height  bottom)  Tc)) 

(Qprop+  ((height  bottom)  Tself)  ((height  bottom)  Tc)))) 

Naming  the  functions  which  determine  level  and  pressure  for  contained  liquids  will  allow  us  to  compare 
values  of  them  found  in  different  containers;  this  information  will  be  used  in  the  envisioning  chapter.  'Hie 
correspondence  says  that  the  level  approaches  the  bottom  of  the  container  as  the  container  runs  out  of  liquid. 
The  rule  at  the  end  of  the  specification  points  out  a  flaw  in  the  implementation  language;  since  general 
de-structuring  mechanisms  aren’t  used,  such  a  mlc  is  the  only  way  to  get  hold  of  die  container  of  the  stuff  in 
order  to  specify  the  relationship  between  the  height  of  the  bottom  of  die  container  and  die  height  of  die 
bottom  of  the  liquid. 

A  crude  geometry  will  suffice  for  our  purposes.  There  are  two  orientations,  vertical  and 
horizontal: 


(defPredicate  orientation) 

(Def ineConstant  vertical) 

(Def ineConstant  horizontal) 

We  will  treat  orientation  as  a  two-place  relation,  tying  an  object  to  one  of  these  constants.  The  predicates 
vertical  and  Horizontal  arc  defined  by  these  rules: 

(rule  (Tf  (  :  Intern  (Vertical  Tobj))) 

(assert  (iff  Tf  (Orientation  Tobj  vertical))  ’Domain-Definition)) 

(rule  (Tf  (tintern  (Horizontal  Tobj))) 

(assert  (iff  Tf  (Orientation  Tobj  Horizontal))  ’Domain-Definition)) 

Being  a  physob  in  this  model  just  means  that  something  has  an  orientation,  and  the  relationship 
between  the  height  of  its  top  and  the  height  of  its  bottom  are  constrained  by  diis  orientation: 

(defEntity  Physob  (((height  top)  Quantity) 

((height  bottom)  Quantity)) 

(Taxonomy  (Orientation  Tself  VERTICAL) 

(Orientation  Tself  HORIZONTAL) ) 

(iff  (Orientation  Tself  HORIZONTAL) 

(Equal-To  (A  ((height  top)  Tself))  (A  ((height  bottom)  Tself)))) 

(not  (Greater-Than  (A  ((height  bottom)  Tself))  (A  ((height  top)  Tself))))) 

To  belter  focus  on  dynamics,  we  w  ill  model  as  little  information  about  piping  systems,  valves,  and  so 
forth  as  possible.  A  container  will  be  modeled  as  a  physob: 

(defEntity  Container  ()  (Physob  Tself)) 

We  will  simply  assert  such  fluid  paths  and  connections  as  exist.  Both  fluid  and  heat  paths,  however,  are 
first-class  individuals: 
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(defEntity  Fluid-Path  ((max-height  Quantity))) 

(defEntity  Heat-Path  ()) 

(defRelation  (Fluid-Connection  ?path  ?source  Tdest) 

(Fluid-Connection  ?path  Tdest  Tsource)) 

(defRelation  (Heat-Connection  Tpath  Tsource  Tdest) 

(Heat-Connection  Tpath  Tdest  Tsource)) 

The  predicate  Fluid-Connection  takes  three  arguments,  a  path  and  two  pieces  of  stuff.  When  true,  it 
indicates  that  the  path  can  serve  as  a  fluid  path  between  one  piece  of  stuff  and  the  other.  All  heat  and  fluid 
connections  arc  also  considered  to  work  both  ways.  Fluid  paths  also  have  a  maximum  height,  since  even  with 
this  simple  geometry,  we  would  like  to  prevent  liquid  from  flowing  up  hill.  Ignoring  pumps  and  the  siphon 
effect.1  we  can  say  that  a  path  will  support  liquid  flow  only  if  the  level  of  the  source  is  greater  than  die 
maximum  height  of  the  fluid  path.  TTiis  will  be  represented  by  an  individual  view: 

(defView  (Liquid-Flow-Supporting  Tpath  Tsrc  Tdst) 

Individuals  ((Tsrc  (Contained-Liquid  Tsrc)) 

(Tdst  (Contained-Liquid  Tdst)) 

(Tpath  (Fluid-Path  Tpath) 

(Fluid-Connection  Tpath  Tsrc  Tdst))) 

QuantityConditions  ( (Greater-Than  (A  (level  Tsrc)) 

(A  (max-height  Tpath))))) 

Now  we  can  talk  about  liquid  flow.  Here  is  the  liquid  flow  process  we  will  use: 

(defProcess  (Liquid-flow  Tsrc  Tdst  Tpath) 

Individuals  ((Tsrc  (Contained-Liquid  Tsrc)) 

(Tdst  (Contained-Liquid  Tdst)) 

(Tpath  (Fluid-Path  Tpath) 

(Fluid-Connection  Tpath  Tsrc  Tdst)) 

(Tsupported  ((View-Instance  Liquid-Flow-Supporting)  Tsupported) 
(Tsupported  path  Tpath) 

(Tsupported  sre  Tsrc) 

(Tsupported  dst  Tdst))) 

Preconditions  ((Aligned  Tpath)) 

QuantityConditions  ((Greater-Than  (A  (pressure  Tsrc)) 

(A  (pressure  Tdst))) 

(Status  Tsupported  Active)) 

Relations  ((Local  flow-rate  (Quantity  flow-rate)) 

(Q«  flow-rate  (-  (pressure  Tsrc) 

(pressure  Tdst))) 

(greater-than  (A  flow-rate)  zero)) 

Influences  ((1+  (amount-of  Tdst)  (A  flow-rate)) 

(I-  (amount-of  Tsrc)  (A  flow-rate)))) 

Notice  that  the  dependence  of  flow  on  the  geometric  properties  of  the  liquid  path  is  expressed  by  including 
the  instance  of  the  support  relation  in  the  individuals  and  requiring  that  the  relationship  is  true  by  placing  it 


1.  The  simplest  way  to  represent  these  would  use  a  hicrarchial  view  description,  with  distinct  cases 
representing  normal  flow,  pumped  flow,  and  siphoning.  However,  hicrarchial  descriptions  arc  not  currently 
supported  in  GI/MO. 
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in  the  quantity  conditions.2  We  ignore  gas  flows  in  this  vocabulary. 

We  have  already  examined  heat  How.  but  for  completeness  wc  include  it  again: 

(defProcess  (Heat-Flow  ?src  ?dst  ?path) 

Individuals  ((?src  (Physob  ?src) 

(Has-Quantity  ?src  heat)) 

(?dst  (Physob  7dst) 

(Has-Quantity  ?dst  heat)) 

(?path  (Heat-Path  ?path) 

(Heat-Connection  ?path  ?src  ?dst))) 

Preconditions  ( ( Heat-Al i gned  ?path)) 

QuantityConditions  (( Greater  -  Than  (A  (temperature  ?src)) 

(A  (temperature  7dst)))) 

Relations  ((Local  flow-rate  (Quantity  flow-rate)) 

(Q-  flow-rate  (-  (temperature  7src) 

(temperature  7ds t ) ) ) 

(Greater-Than  (A  flow-rate)  zero)) 

Influences  ((I*  (heat  7dst)  (A  flow-rate)) 

(I-  (heat  ?src)  (A  flow-rate)))) 

Remember  that  the  Q*  expands  inio  two  qualitative  proportionalities,  hence  the  flow  rate  will  be  indirectly 
influenced  by  changes  in  the  temperature  of  the  source  and  destination. 

Boiling  is  slightly  more  complicated  because  it  involves  state  changes: 

(defProcess  (Boiling  ?w  7hf) 

Individuals  ((?w  ( Con ta i ned- L 1 qu i d  7w)) 

(?hf  ((Process-Instance  Heat-Flow)  7hf) 

(?hf  OST  ?w) ) 

(?s  (Substance  7*) 

( 7w  SUBSTANCE  7s)) 

(7c  (Container  7c) 

(7w  CONTAINER  7c))) 

QuantityConditions  ((Status  7hf  ACTIVE) 

(not  (Less-Than  (A  (temperature  7w)) 

(A  (tboil  7w) ) ) ) ) 

Relations  ((Introduces  (c-s  7s  GAS  7c)) 

(Contained-Stuff  (c-s  7s  GAS  7e)) 

(Local  generation-rate  (Quantity  generation-rate)) 

(Local  absorption  (Quantity  absorbtion)) 

(Has-Value  (s  (d  (heat  (c-s  7s  GAS  7c))))  0) 

(Greater-Than  (A  absorbtion)  ZERO) 

(Greater-Than  (A  generation-rate)  ZERO) 

(Q-  (temperature  7w)  (temperature  (c-s  7s  GAS  7c))) 

(Qprop+  generation-rate  (flow-rate  7hf ) ) ) 

Influences  ((I-  (heat  ?w)  (A  (flow-rate  7hf))) 

(I-  (heat  (c-s  ?s  GAS  7c))  (A  absorbtion)) 

(1+  (amount-of  (c-s  7s  GAS  ?c))  (A  generation-rate)) 

(I-  (amount-of  7w)  (A  generation-rate)))) 

As  in  die  cither  vocabulary,  stale  changes  arc  modelled  by  asserting  that  the  canonical  individual 
corresponding  to  the  resulting  phase  exists,  and  its  amount  will  increase  as  the  amount  of  the  stuff  in  the 
original  phase  decreases.  Here  wc  see  Introduces  at  work:  certainly  boiling  creates  steam,  but  since  there  can 
be  steam  in  the  container  even  when  boiling  isn't  occuring  we  use  introduces  instead  of 


2.  The  predicate  (View-instance  Liquid-Flow-Supporting)  is  simply  a  "curried"  predicate  automatically 
introduced  to  speed  matching. 
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introduces-un iqueiy  as  in  the  contained  stuff  description.  The  substance  (?s)  and  container  (?c)  arc 
included  in  die  individuals  specification  since  die  pattern-matching  there  is  GIZMO'S  major  mechanism  for 
de-structuring  compound  objects. 

1  el  us  examine  the  causes  and  consequences  of  boiling  more  closely .  Predicating  boiling  on  a  heat 
How  occuring  models  the  necessity  of  a  source  of  energy  for  phase  transitions.  Adding  an  influence  which  is 
the  opposite  of  the  (low  rate  of  die  heat  flow  to  the  heat  of  die  water  prevents  the  temperature  of  die  water 
from  changing,  lhe  flat  assertion  that  the  heat  of  the  gas  is  unchanging  (i.e..  die  Has-vaiue  statement)  and 
the  aDsornt  ion  influence  on  die  g.is  is  a  kludge;  given  that  the  heat  flow  to  water  is  active,  dierc  will  also  be  a 
heat  flow  from  die  same  source  into  the  newly -formed  gas.  By  only  constraining  die  sign  of  absorbtion,  the 
assertion  that  the  heat  of  the  gas  is  unchanging  will  result  in  die  assumption  (when  resolving  influences)  diat 
the  influence  of  die  heat  flow  to  the  steam  will  be  cancelled  out. 

Finally,  there  are  two  limit  rules  dial  reduce  GIZMO'S  computational  burden  when  envisioning. 
The  first  rule  concerns  changes  in  the  ordering  between  the  level  of  liquid  in  a  container  and  the  maximum 
height  of  a  fluid  path,  the  quantity  condition  for  Liquid-fiow-Supporting.  In  particular,  die  rule  concerns  the 
possibility  dial  die  relationship  between  level  of  die  contained  liquid  and  the  maximum  height  of  the  path 
will  change  from  Greater-Than  to  Equal -To.  as  would  happen,  for  instance,  if  there  were  flow  out  of  a 
container.  The  body  of  the  rule  checks  to  make  sure  that  the  height  of  the  bottom  of  die  container  isn't  less 
than  the  maximum  height  of  die  path  (i.e.,  that  the  maximum  height  of  the  padi  is  less  than  or  equal  to  the 
height  of  the  bottom  of  die  container).  If  it  isn’t,  then  it  returns  all  to  indicate  that  this  possible  change  is 
impossible,  cither  by  itself  or  in  concert  w  ith  other  possible  changes: 

(  def L imi t-Rul e  No-Hills 

(((A  (level  (at  (c-s  Tsubstsnce  Liquid  ^container)  Tslt))) 

(A  (max-height  (at  Tpath  ?sit))) 

Greater-Than 
Equal -To) ) 

(multiple-value-bind  (relation  reasons) 

(ordering  ‘(A  ((height  Bottom)  (at  .Tcontalner  . 7 s 1 1 ) ) ) 

'(A  (max-height  (at  ,?path  ,7s1t)))) 

(if  (and  relation  (not  (eq  relation  '  Less-Than) ) ) 

(values  'ALL  reasons) 

(values  nil  nil)))) 

Without  diis  rule,  GIZMO  comes  to  the  same  conclusion  by  considering  what  would  be  true  after  this  change 
had  occured.  First,  suppose  this  change  happens  at  the  same  time  die  amount  of  liquid  reaches  zero.  Then 
this  change  is  moot,  since  the  liquid  no  longer  exists.  Should  the  amount  of  liquid  be  greater  dian  zero,  the 
correspondence  between  amount-of  and  level  in  the  Contamed-Liquio  description  allows  GIZMO  to 
conclude  that  die  level  must  be  greater  than  the  height  of  the  bottom,  thus  contradicting  die  assumption  diat 
die  level  equals  die  maximum  height  of  the  padi.  Since  diat  change  leads  to  a  contradiction,  GIZMO  will 
mark  it  as  inconsistent. 

The  second  ndc  embodies  the  conclusion  lh.it  if  the  heights  of  die  bottoms  of  two  containers  arc  the 
same  then  die  source  of  a  liquid  flow  between  them  won’t  vanish: 
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(DefLimit-Rule  No-Sinks 
((ZERO 

(A  ( amount-of- in  Tsubstance  Liquid  (at  Tcontainer  ? s  1 1 ) ) ) 

Less-Than 
Equal -To) ) 

(multiple-value-bind  (okay?  reasons) 

(all -con tainers-at -same- level ?  ?si t) 

(if  (and  okay? 

(every-direct-influencer-of-type  ‘(amount-of  (at  (c-s  ,?substance 

Liquid 
, ?container) 

.  ?  s  i  t ) ) 

'Liquid-Flow)) 

(values  'ALL  reasons) 

(values  NIL  reasons)))) 

The  pattern  describes  the  possibility  of  the  quantity  condition  for  an  instance  of  Contained-Stuff  changing  in 
such  a  way  as  to  make  it  inactive  (i.e..  that  the  amount  of  stuff  drops  to  zero).  The  function 
ai  i- con  tainers-at- same -level?  tests  to  sec  whether  or  not  the  heights  of  the  bottoms  of  all  containers  in  the 
situation  are  equal  to  each  other.  If  they  arc,  and  if  every  direct  influence  on  die  amount  is  due  to  some 
instance  of  liquid  flow  (checked  by  the  function  every-direct-infiuencer-of-type),  then  this  change  cannot 
occur,  cither  alone  or  in  concert  with  other  changes.  The  types  of  processes  which  provide  direct  influences 
arc  limited  to  be  Liquid-Flow  because  the  argument  originally  used  in  ailing  out  this  change  (which  we  will 
sec  momentarily)  doesn't  apply  when  boiling  occurs.  Requiring  that  all  containers  be  at  the  same  level  is 
quite  conservative,  since  the  only  containers  that  really  matter  arc  those  which  arc  connected  to  the  source  by 
some  fluid  path. 

Hie  way  GIZMO  draws  the  conclusion  represented  by  this  rule  is  rather  subtle.  Consider  the  simple 
case  of  liquid  flow  occuring  between  two  containers  connected  together  by  a  single  fluid  path  (as  say  in 
section  4.1).  Suppose  the  hypothesized  change  occurcd.  Then  the  contained  liquid  in  the  destination  will 
exist  and  die  contained  liquid  in  the  source  won  t.  Hut  if  the  contained  liquid  in  the  source  did,  what 
inequalities  w  ould  hold  between  its  parameters  and  the  other  parameters  of  the  situation?  Since  the  amount 
of  the  source  liquid  is  zero,  its  level  will  be  equal  to  the  height  of  the  bottom  (by  the  correspondence  in  the 
Contamed-Liquid  description  cited  previously).  Since  the  function  which  determines  level  as  a  function  of 
amount  is  the  same  for  all  contained  liquids  (i.e..  level -fund  ion,  as  defined  by  die  f unction -Spec  statement 
in  the  contained-uquid  definition),  the  heights  of  the  bottoms  of  the  two  containers  arc  die  same,  and  the 
amount  of  contained  liquid  in  die  destination  is  greater  than  zero,  which  means  that  die  level  of  the 
destination  liquid  is  greater  than  dial  of  the  source.  Because  die  function  diat  relates  pressures  and  levels  is 
the  same  for  all  liquids  (the  function  p-i-function  introduced  in  die  Contained-Liquid  description),  this 
means  the  pressure  of  the  source  liquid  is  less  dian  the  pressure  of  the  destination  liquid.  But  before  the 
change,  the  pressure  of  die  source  liquid  was  greater  than  die  pressure  of  die  destination  liquid  (as  evidenced 
by  the  flow  from  the  source  to  die  destination).  Hence  quantity  space  continuity  (see  section  3.6.4)  has  been 
violated,  rendering  dns change  impossible. 
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8.3  Motion 


The  description  presented  here  is  actually  a  simple  set-up  for  simulating  a  spring  and  block 
oscillator,  rather  than  a  general  domain  description  for  sliding  motion.  Progress  on  building  motion  models 
!  was  held  up  due  to  a  deficiency  in  the  implementation;  until  recently.  GIZMO  had  no  way  of  finding  out 

what  domain-dependent  closed  world  assumptions  it  needed  to  make  in  the  course  of  reasoning.  This  meant 
the  set  of  net  forces,  crucial  to  modelling  motion,  could  not  change  as  conditions  changed.  This  deficency  has 
since  been  remedied,  but  die  new  motion  vocabulary  has  not  been  adequately  debugged  and  hence  will  not 
be  presented. 

|  hirst,  we  describe  the  types  of  quantities  used. 

( defQuantity-Type  position) 

( defQuant i ty-Type  velocity) 

(defQuantity-Type  force) 

(defQuantity-Type  length) 

(defQuantity-Type  rest-length) 

(defQuantity-Type  acc) 

The  objects  we  will  consider  are  blocks  and  springs.  A  block's  position  will  be  completely  described 
by  a  quantity,  as  will  its  velocity  and  (net)  force: 

(defEntity  Block  ((position  quantity) 

(velocity  quantity) 

I  (force  quantity)) 

(Mobile  Tself)) ) 

All  blocks  arc  assumed  to  be  mobile.  A  spring's  force  is  determined  by  the  difference  between  its  length  and 
rest  length: 


(defentity  Spring  ((force  quantity) 

(rest-length  quantity) 

(length  quantity)) 

(Qprop-  (force  ?self)  (length  Tself)) 

(correspondence  ((A  (force  ? se 1 f ) )  zero) 

((A  (length  Tself))  (A  (rest-length  Tself))))) 

A  spring  has  several  suites.  If  the  length  is  the  same  as  the  rest  length  then  it  is  relaxed,  if  the  length  is  greater 
than  the  rest  length  then  it  is  stretched,  and  if  the  length  is  less  than  the  rest  length  then  it  is  compressed.  As 
before,  these  suites  will  be  modelled  as  individual  views: 


(defview  (Relaxed  ?s) 

Individuals  ( ( ? s  (spring  7s))) 

QuantityConditions  ((Equal-to  (A  (length  7s))  (A  (rest-length  7s))))) 

(defview  (Stretched  7s) 

Individuals  ((7s  (spring  7s))) 

QuantityConditions  ( (Greater-Than  (A  (length  7s))  (A  (rest-length  7s))))) 

(defview  (Compressed  7s) 

Individuals  ((7s  (spring  7s))) 

QuantityConditions  ((Less-Than  (A  (length  7s))  (A  (rest-length  7s))))) 

We  will  need  a  way  to  talk  about  directions.  Ilie  simplest  way  would  be  to  use  the  values  of  signs  as 
indicating  directions  along  some  (implicit)  axis.  Unfortunately.  DKIlACl.lt  docs  not  allow  fixed-point 
numbers  to  be  first-class  individuals.  I  bus  we  shall  introduce  symbolic  names  for  these  directions: 


I 


u 
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(def predicate  direction  nil) 

( aef ineConstant  Plus) 

( def ineConstant  Minus) 

( def ineConstant  Null) 

(deffact  (Direction  MINUS)) 

(deffact  (Direction  PLUS)) 

(deffact  (Direction  NULL)) 

(defFact  ( Non-Nul 1 -0 i rec t ion  MINUS)) 

(deffact  ( Non-Nu 1 1 -D i rec t ion  PLUS)) 

(deffact  (not  ( Non-Nul I -D i rect ion  NULL))) 

(Inpossible-fact  ( Non-Nul  1 -0 i rec t ion  NULL)) 

The  additional  distinction  that  a  direction  is  not  null  is  needed  to  mlc  out  motion  that  doesn’t  go  anywhere. 
The  Di  rec t  i on-0f  predicate  links  these  constants  with  sign  values: 

(defRelation  (Direction-Of  7dir  Tnumber) 

:code  (caseq  Tdir 

(MINUS  (rassume  (iff  ?self 

(Has-Value  (s  Tnumber)  -1))  ’Direction-Law)) 

(NULL  (rassume  (iff  Tself 

(Has-Value  (s  Tnumber)  0))  ’Direction-Law)) 

(PLUS  (rassume  (iff  Tself 

(Has-Value  (s  Tnumber)  1))  ’Direction-Law)) 

(t  (rassume  (not  Tself)  ’Direction-Law)))) 

(def Computable-Rcl at  ion  Oirection-of ) 

This  definition  tics  the  constants  minus,  plus,  and  null  to  sign  values  of -l,  l,  and  o  respectively.  The  second 
statement  (the  defComputabie-Reiation  form)  tells  GIZMO  dial,  unlike  most  statments  in  preconditions, 
facts  of  this  type  can  be  re-computed  and  hence  should  not  be  automatically  assumed  to  persist 

Somehow  a  block  and  spring  must  be  connected.  The  right  way  would  be  to  have  a  Connected-To 
relationship  that  would  transmit  forces  (as  in  the  examples  in  section  4.4).  However,  since  Lhis  vocabulary 
assumes  no  means  of  updating  the  set  of  net  forces  (thanks  to  the  implementation  deficiency  mentioned 
above),  we  will  have  to  use  a  kludge: 

(defRelation  (Connected-to-Spring  Tfrom  ?to) 

:7from  is  the  block 
;Tto  is  the  spring 
(O'  (force  Tfrom)  (force  ? to ) ) 

(Qpropf  (force  Tfrom)  (force  ? to ) ) 

(Qprop+  (length  ? to )  (position  Tfrom)) 

(correspondence  ((A  (length  T  to ) )  (A  (rest-length  Tto))) 

((A  (position  Tfrom))  zero))) 

This  description  is  a  kludge  because  it  violates  the  "no  function  in  structure"  principle  |dc  Klecr  &  Brown, 
1983].  By  asserting  the  force  of  the  spring  equals  that  of  the  block,  it  implicitly  assumes  that  the  spring  and 
block  have  no  other  forces  applied  to  them.  This  makes  the  description  nun-modular.  Since  we  have  already 
sullied  ourselves,  we  also  incorporate  the  assumption  that  the  spring  is  at  its  rest  length  when  the  position  of 
the  block  is  at  the  origin  (the  second  Qprop-*-  and  the  Correspondence). 

The  process  vocabulary  we  will  use  is  only  slightly  different  from  the  Newtonian  model  introduced 
in  section  4.3: 


l 
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(defProcess  (Motion  ?obj  ?dir) 

Individuals  ((?obj  (Mobile  ?  o  b  J  ) ) 

(  ?d  1  r  (Oirection  ?d  i  r ) 

(Non-Nul 1 -Direction  ?  d  i  r ) ) ) 

Preconditions  ( ( D  i  rec t ion -Of  ?dir  (A  (velocity  ?obj) ) )) 

Quant i tyCond  1 1 i ons  (( Greater- than  (n  (A  (velocity  ?ob j ) ) )  zero)) 

Influences  ((I-  (position  ?ooj)  (A  (velocity  ?obj))))) 

As  mentioned  above,  motion  occurs  when  an  object  has  a  non-zero  velocity.  In  this  vocabulary,  a  distinct 
instance  of  motion  will  be  created  for  each  direction  of  motion.  The  Direction-of  statement  in  die 
preconditions  ensures  that  the  instance  appropriate  to  die  velocity's  direction  becomes  active.  The  difference 
between  this  description  and  the  earlier  model  is  the  additional  matching  condition  of  the  direction  being 
non-null,  which  precludes  creating  an  instance  of  motion  that  w  ill  never  be  activ  e.  A  similar  trick  is  used  in 
modelling  acceleration: 


(defprocess  (Accelerating  ?obj  ?dir) 

Individuals  ((?obj  (Mobile  ?obj)) 

(?dir  (Direction  ?dir) 

(Non-Nul 1-Direction  ?dir))) 

Preconditions  ( ( Di rec t ion -Of  ? d i r  (A  (force  ?obj)))) 

Quan t i tyCond i t i ons  ( ( Greater-than  (m  (A  (force  ? ob j ) ) )  zero)) 
Relations  ((Local  acc  (Quantity  acc)) 

(Qprop*  acc  (force  ?ob j ) ) 

(Correspondence  ((A  acc)  zero) 

((A  (force  ?obj))  zero))) 
Influences  ((1+  (velocity  ?obj)  (A  acc)))) 


I  urbus 


-119- 


QP  theory 


Ilasic  deductions 

In  this  diopter  we  examine  algorithms  to  perform  the  basic  deductions  used  in  Quallitalive  Process 
theory .  To  avoid  getting  mired  in  uninteresting  details,  the  algorithms  will  he  spec i fed  in  "structured 
Inglish".  Occasionally.  implementation  tricks  which  allow  signlicant  speedups  will  lie  described. 


').!  finding  \ iew  and  process  instances 

In  principle,  finding  view  and  process  instances  is  simple.  Given  an  initial  set  of  objects,  find  all 
collcMu  ns  of  them  which  match  die  individual  specifications  of  each  individual  view  and  process  in  die  view 
and  puvess  vocabularies.  bach  collection  gives  rise  to  an  instance  of  dint  particular  view  or  process.  P'or 
example,  there  will  be  two  view  instances  for  every  substance  and  even  container,  each  representing  that 
substance  m  a  particular  state  inside  the  container.  However,  the  ability  of  processes  and  individual  views  to 
introduce  new  individuals  when  active  complicates  this  picture  somewhat,  since  the  matching  computation 
may  have  to  be  performed  again  on  the  new  individuals.  For  example,  if  we  believe  some  of  the  view 
nisi. nii.es  representing  contained  liquids  in  the  dircc-containcrs  scenario  (section  5.1)  arc  active,  there  will 
now  be  process  instances  corresponding  to  flows  between  diem. 

In  practice,  producing  all  possible  individuals  and  instances  from  an  initial  collection  of  objects 
simplifies  later  computations.  This  procedure  will  be  called  elaborating  a  situation.  Figure  48  presents  the 
algorithm  used.  One  subtlety  is  worth  mentioning.  A  naive  algorithm  would  result  in  an  exponential  number 
of  assumptions  about  the  status  of  instances,  since  all  possible  combinations  of  status  assignments  would  have 
to  he  tried  to  ensure  that  all  and  only  die  possible  instances  have  been  found.  For  example,  both  view 
instances  corresponding  to  contained-liquids  in  two  containers  connected  by  a  fluid  padt  would  have  to  be 
assumed  true  to  find  the  appropriate  instances  of  liquid  flow.  However,  die  algorithm  presented  tests  each 
instance  only  once.  How  can  this  work? 

The  trick  lies  in  the  willingness  to  match  on  statements  that  have  some  chance  of  being  true, 
a  regardless  of  their  current  belief  status.  This  is  formalized  by  the  idea  of  a  possibly  true  fact.  A  fact  is 
possibly  true  if  and  only  if  (1)  it  has  been  mentioned  ( i.e..  it  appears  in  die  database),  (2)  it  is  not  marked  as 
being  impossible  and  (.1)  either  it  is  true  or  there  is  some  reason  to  believe  it  could  be  true.  The  second 
condition  is  useful  in  ruling  out  some  absurd  possibilities,  as  we  saw  in  die  fluid  model  of  Section  8.2.  Ihc 
laud  condition,  the  existence  of  some  reason  to  believe  it  could  be  true,  is  satisfied  in  GIZMO  by  the 
existence  of  any  clause  in  die  IMS  which  could  make  it  true.  Importantly,  the  rules  which  implement  die 
dom..n  know  ledge  (such  as  those  created  by  defEntuy.  defPredicate,  defReiation.  and  so  foi  tli)  trigger  on 
a  fast  being  interned  --  being  in  the  database  --  rather  than  being  actually  believed  to  be  true.  Thus  all  the 
pied  .ales  and  relationships  which  might  be  true  are  in  the  database,  the  clauses  they  introduce  are  accessible 
to  die  I  MS,  .aid  matches  to  find  potential  instances  are  generated  on  that  basis  lather  than  actual  current 
belief.  In  the  waist  case  this  algorithm  can  generate  instances  which  could  never  be  active,  but  this  seems  a 
small  pi  xe  to  pay  for  avoiding  making  and  retracting  an  exponential  number  of  assumptions.1 


1  Notice  that  :f  every  rule  in  the  system  triggers  on  :  intern,  step  4  isn't  necessary  at  all. 
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Fig.  48.  Situation  elaboration 

Procedure  Elaborate 

1.  Let  SLICES  be  the  individuals  which  initially  exist 
in  the  situation. 

2.  Compute  a  table  of  all  the  type  predicates  which  apply 
to  the  members  of  SLICES 

3.  For  each  process  in  the  Process  Vocabulary  and  each 
individual  view  in  the  View  Vocabulary, 

3.1  Find  all  collections  of  objects  from  SLICES  which  match  the 
individual  specifications  of  the  description 

3.2  Create  an  instance  of  that  type  of  process  or  view 
for  each  such  collection. 

4.  For  each  new  instance, 

4.1  Assume  it  Is  active. 

4.2  Note  any  new  individuals  which  exist  as  a  result 
of  its  being  active.  Add  these  individuals  to 
SLICES  and  update  the  type  table  accordingly. 

4.3  Retract  the  assumption  that  it  is  active. 

5.  Continue  from  step  3  until  no  new  Instances  or 
individuals  are  found. 


Once  the  view  and  process  instances  arc  found  for  a  situation,  a  comparison  table  is  computed  that 
summarizes  which  numbers  arc  compared  by  quantity  conditions  of  these  instances.  The  comparison  table  is 
used  in  performing  limit  analysis. 


9.2  Finding  view  and  process  structures 

Finding  out  which  process  and  view  instances  are  active  in  any  particular  situation  requires 
establishing  their  preconditions  and  quantity  conditions.  In  the  simplest  case  this  is  performed  by  collecting 
the  preconditions  and  quantity  conditions  associated  with  all  the  instances  and  merging  them  to  determine  the 
minimal  set  of  facts  that  need  to  be  established.  For  example,  if  flows  in  both  direction  arc  possible,  one 
needs  only  to  ask  once  about  the  relationship  between  the  pressures  to  determine  which,  if  any  of  them,  is 
active.  How  these  facts  arc  established  will  depend  on  exactly  what  the  program  is  doing.  Usually  this 
information  will  be  provided  in  the  initial  conditions  or  determined  by  asking  the  user.  Often  it  is  more 
natural  to  simply  ask  about  the  status  of  instances  directly,  and  this  option  is  provided  as  well. 

In  performing  measurement  interpretation,  the  space  of  possible  view  and  process  structures  is 
searched  by  constructing  a  dependency-directed  generator  to  enumerate  the  possibilities  (sec  the  appendix). 
A  similar  generator  is  used  in  envisioning  if  the  view  or  process  structure  in  the  initial  situation  is  not 
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completely  specified,  but  the  envisioning  algorithm  guarantees  die  process  and  view  structures  will  be 
complete  in  every  situation  it  constructs  after  that. 


9.3  Resolving  influences 

Suppose  the  process  and  view  structures  arc  known.  Then  all  of  the  direct  influences  on  the 
quantities  in  the  situation  will  be  known,  as  well  as  the  qualitative  proportionalities  which  will  propagate  these 
direct  effects  to  indirectly  influence  other  quantities.  Using  this  information,  influence  resolution  attempts  to 
calculate  a  d  value  for  each  quantity  in  the  situation.  Figure  49  presents  the  algorithm  used  to  resolve 
influences.  The  first  two  steps  set  up  the  machinery  needed  for  resolving  each  quantity.  The  third  step  orders 
the  quantities  so  that  no  quantity  will  be  considered  before  trying  to  resolve  quantities  it  depends  on.  'Fhis  is 
accomplished  by  a  simple  tree-walk  outward  from  each  directly  influenced  quantity  along  qualitative 
proportionalities,  as  figure  50  illustrates.  Notice  that  this  algorithm  implicitly  assumes  that  the  graph  of 
qualitative  proportionalities  which  hold  at  any  particular  time  is  loop-free.  This  assumption  is  safe  for  several 
reasons.  First,  relationships  between  parameters  arc  represented  irrcdundantly  since  qualitative 
proportionalities  express  the  assumed  direction  of  causation  as  well  as  a  functional  dependence.  Second,  by 
assumption,  no  quantity  can  be  both  directly  and  indirectly  influenced  at  the  same  time.  This  condition 
prevents  forming  loops  that  arc  not  ruled  out  by  die  first  condition.  Finally,  die  distinction  between  direct 
and  indirect  influences  "breaks"  loops  which  would  otherwise  appear  due  to  simultaneous  equations  in  other 
types  of  models.1 

Step  4  is  where  the  actual  work  is  accomplished.  The  effect  of  the  sorting  is  that  die  iteration  will 
begin  with  uninfluenced  quantities,  then  the  directly  influenced  quantities,  and  finally  die  indirectly 
influenced  quantities.  If  a  quantity  is  directly  influenced  then  its  derivative  will  be  die  sum  of  the  influence 
adder  constructed  for  it  (step  2.1).  The  adder  may  be  able  to  decide  die  sum  directly,  if  for  example  the 
positive  or  the  negative  inputs  set  is  empty.  As  menuoned  previously,  the  adder  may  also  use  inequality 
information  if  dicrc  arc  both  positive  and  negative  direct  influences.  This  information  may  change  if  the 
quantities  providing  the  direct  effects  (such  as  flow  rates)  arc  influenced,  and  so  these  inequalities  arc  added 
to  the  situation's  comparison  table  so  that  limit  analysis  can  take  changes  in  them  into  account.  As  mentioned 
previously,  if  there  arc  conflicting  effects  on  an  indirectly  influenced  quantity,  then  inequality  information 
will  not  a  priori  help.  However,  if  access  to  domain-specific  or  problem-specific  rules  is  provided  (which  it 
isn't  in  GIZMO,  yet),  any  use  they  make  of  inequality  information  should  also  be  added  to  the  comparison 
table. 


1.  In  particular,  the  "feedback  heuristics"  required  in  [dc  Klccr,  1979],  (dc  Klccr  &  Brown  1984]  and 
[Williams,  1984]  arc  unnecessary. 


I'ig.  49.  Resolving  influences 


Procedure  Resolve 

1.  Let  QUANTITIES  be  the  set  of  quantities  belonging 
to  the  objects  in  the  situation. 

2.  For  each  quantity  Q  in  QUANTITIES, 

2.1  If  directly  influenced,  create  an  influence  adder. 

Make  closed-world  assumptions  to  determine  the  inputs 
and  minus-inputs  for  the  influence  adder. 

2.2  Otherwise,  find  CONSTRAINERS( Q)  by  fetching  all 
°Cq+  and  ocq.  statements  which  have  Q 

as  their  first  argument,  closing  this  set  by  assumption 

3.  Let  QUEUE  •  SORT-BY-DEPENOENCY(QUANTITIES) . 

4.  Until  QUEUE  is  empty, 

4.1  Let  Q  -  pop(QUEUE) 

4.2  If  Q  is  directly  influenced,  then 

4.2.1  If  the  sum  of  its  influence  adder  is  known, 
the  Os[Q]  equals  the  sum. 

4.2.2  Add  any  inequality  information  used  by  the 
adder  to  COMPARISONS. 

4.3  Otherwise,  if  CONSTRAINERS(Q)  is  non-empty, 

4.3.1  Let  PLUS.  MINUS,  UNKNOWN  be  empty 

4.3.2  For  each  Q1  in  CONSTRAINERS(Q) 

4.3. 2.1  If  DS[Q1]  •  1  and  Q  <xQ+  Qi 

or  DS[Q1]  *  -1  and  Q  ocg_  Ql.  then 
add  Ql  to  PLUS. 

4.3. 2.1  If  0S[Q1]  *  -1  and  Q  ocQ+  Ql 

or  DS[Q1]  -  1  and  Q  Ql,  then 
add  Ql  to  MINUS. 

4. 3. 2.1  If  0S[Q1]  is  unknown,  then  add  Ql 
to  UNKNOWN 

4.3.3  If  UNKNOWN  is  non-empty  or  if  both  PLUS 
and  MINUS  are  non-empty,  then  DS[Q]  cannot 
be  decided. 

4.3.4  If  PLUS  is  non-empty,  then  DS[Q]  •  1 

4.3.5  If  MINUS  is  non-empty,  then  DS[Q]  ■  -1 

4.3.6  Otherwise,  DS[Q]  *  0 

4.4  Otherwise,  D$[Q]  ■  0 

5.  If  COMPARISONS  is  non-empty,  use  it  to  update 
the  situation's  comparison  table 
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Fig.  50.  Determining  the  order  of  resolution 

Procedure  S0RT-8Y-DEPEND£NCY( QUANTITIES) 

1.  For  each  Q  in  QUANTITIES,  let  mark(Q)  -  0. 

2.  For  each  Q  in  QUANTITIES, 

2.1  IT  directly  influenced,  MARK-DEPTH(Q,  1) 

3.  Return  QUANTITIES,  sorted  by  increasing  marks. 
Procedure  MARK-D£PTH(Q,  depth) 

1.  If  mark(Q)  <  depth, 

1.1  let  mark(Q)  ■  depth 

1.2  for  each  Q1  in  CONSTRAINEES(Q) , 

MARK-D£PTH(Q1,  depth+1) 


9.4  Limit  analysis 

Limit  analysis  is  the  most  complex  of  the  basic  deductions.  ITic  purpose  of  limit  analysis  is  to 
identify  suite  changes,  such  as  changes  in  process  structure,  view  structure,  or  changes  in  o$  values,  due  to  the 
activity  of  processes.  In  essence,  it  works  by  using  the  ds  values  found  by  influence  resolution  to  detect 
possible  changes  in  the  quantity  space  values,  such  as  a  quantity  approaching  a  limit  point.  We  will  begin  by 
examining  the  top-level  procedure,  then  take  a  closer  look  at  die  individual  steps.  The  top-level  procedure  is 
illustrated  in  figure  51.  Recall  that  the  hypothesis  that  a  particular  ordering  relationship  or  set  of  ordering 


Fig.  51.  Limit  analysis 

Procedure  Limit  Analysis(S) 

1.  Find  the  set  of  quantity  hypotheses  representing 
possible  changes  in  quantity  spaces  for  quantities 

in  S.  Also  determine  the  sets  NEXT-QHS(S)  and  ECL-QHS(S). 

2.  For  each  quantity  hypothesis,  annotate  it  with  the  changes 
it  causes  in  the  process  and  view  structures  (if  any). 

2.  Filter  out  those  quantity  hypotheses  which  lead  to 
inconsistent  situations. 

3.  Assign  a  duration  to  the  situation  as  follows: 

3.1  If  NEXT-QHS(S)  is  non-empty,  then  INSTANT. 

3.2  If  ECL-QHS(S)  is  empty,  then  INTERVAL 


3.3  Otherwise,  duration  is  AMBIGUOUS 
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relationships  represents  the  next  change  that  occurs  is  called  a  quantity  hypothesis  (see  Section  3.6.4).  Hie  first 
step,  finding  the  set  of  quantity  hypotheses,  is  the  most  complex  and  it  will  be  examined  shortly.  Once  found, 
the  quantity  hypotheses  are  marked  with  the  change  they  will  cause  in  die  view  and  process  structure  for  the 
situation,  if  any  --  the  hypothesis  might  simply  correspond  to  a  change  in  the  way  influences  are  resolved. 

f  inding  out  exactly  what  changes  will  result  from  a  particular  quantity  hypothesis  being  true  (step  2) 
is  quite  complicated  because  domain-specific  knowledge  may  rule  out  the  hypothesis  as  being  inconsistent. 
We  will  discuss  the  procedure  used  in  the  chapter  on  envisioning.  However,  a  simpler  algorithm  suffices  to 
determine  the  what  changes  a  quantity  hypothesis  will  make  in  the  view  and  process  structures,  assuming  it 
turns  out  to  be  consistent.  The  idea  is  to  make  a  simple  constraint  network  model  of  the  individuals,  view  and 
process  instances,  and  quantity  conditions  which  embodies  the  relationships  between  statuses  and  existence. 
This  constraint  model  is  then  set  up  to  represent  what  objects  currently  exist,  the  current  statuses  of  view  and 
process  instances,  and  the  current  truth  of  quantity  conditions.  The  changes  represented  by  a  quantity 
hypothesis  arc  fed  into  the  contraint  model,  and  die  resulting  changes  in  statuses  and  existence  read  out  from 
it 

['here  are  three  kinds  of  objects  in  this  constraint  model,  models  of  individuals,  models  of  instances, 
and  models  of  quantity  conditions.  A  model  of  an  individual  has  an  existence  property.  If  it  exists  by  virtue 
of  some  instance  being  active,  the  model  of  that  instance  is  said  to  be  a  supporter  of  it.  If  a  model  of  an 
individual  has  supporters,  then  it  exists  exactly  when  one  of  them  is  active.  A  model  of  a  comparison  has  an 
existence  property  as  well,  tied  to  the  existence  of  the  individuals  whose  quantities  it  compares.  It  also  has  a 
property  w  hich  describes  the  relationship  which  holds  between  the  quantities  it  compares.  A  model  of  a  view 
or  process  instance  has  an  existence  property  and  a  status  property  .  Like  the  other  models,  it  has  supporters  -- 
those  individuals  upon  whom  its  existence  depends,  and  whether  or  not  it  is  active  depends  on  whether  the 
state  of  the  comparison  models  which  represent  its  quantity  conditions  match  its  internal  suite  specifications. 

The  constraint  network  for  a  situation  is  built  as  soon  as  the  situation  has  been  elaborated.  To  use  it, 
the  properties  of  models  (existence,  state  of  comparisons,  and  statuses  of  instances)  are  set  up  to  reflect  the 
current  situation.  The  state  of  the  comparision  models  which  correspond  to  die  change  represented  by  a 
quantity  hypothesis  arc  changed  accordingly,  and  these  results  propagated  through  the  model.  By  keeping  a 
record  of  the  previous  suite  and  comparing  this  record  with  the  model's  current  state,  the  changes  which  will 
occur  can  be  determined.  Notice,  however,  that  this  procedure  is  not  informed  by  any  particular 
domain-dependent  information,  such  as  the  existence  of  correspondences  or  explicit  functions.  So  the 
constraint  netw  ork  model  cannot  detect  that  a  hypothesis  is  inconsistent,  only  provide  information  about  what 
changes  will  result  if  it  is.  T  his  constraint  model  is  also  useful  in  pruning  certain  irrelevant  conjunctive 
hypotheses,  as  we  will  sec  shortly. 

Returning  to  the  top-level  algorithm,  the  third  and  final  step  is  to  assign  a  duration  to  flic  situation, 
based  on  how  soon  it  will  change.  Recall  that  we  divide  times  into  insuinis  and  intervals,  and  the  equality 
change  law  determines  how  long  each  situation  will  list  (sec  section  3.6.4).  The  sets  next-qhs  and  ecl-QHS  are 
computed  as  side-effects  of  finding  quantity  hypotheses,  as  we  will  sec  below  .  Both  sets,  if  non-empty,  consist 
of  quantity  hypotheses  which  satisfy  the  equality  change  law.  The  distinction  between  them  comes  about 
because  some  quantity  hypotheses  depend  on  additional  assumptions.  Suppose,  for  example,  that 

A[Qj]  •  A[Q2]  A  DjCOj]  -  DS[QZ]  •  l 
Then  Oj  and  Q2  will  change  from  equality  if  and  only  if 
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Since  the  two  r.ites  might  he  equal,  it  is  not  certain  that  this  change  will  occur.  Hie  hypotheses  in  next-qhs 
are  the  subset  of  hypotheses  covered  by  the  equality  change  law  which  do  not  require  such  assumptions. 
Iheretoie  if nexi-qhs  is  non-empty,  some  instantaneous  change  must  occur  and  so  the  situation  lasts  but  an 
instant.  I  he  set  ecl-qhs  simply  consists  of  all  instantaneous  changes,  so  if  it  is  empty  the  situation  must  last 
for  some  interval  of  time.  Otherwise  the  situation  may  last  an  instant  if  the  assumptions  underlying  the 
hypotheses  representing  instantaneous  changes  are  satisfied,  or  an  interval  of  time  if  they  aren't.  So  in  that 
case  the  duration  is  marked  as  ambiguous. 

Now  we  turn  to  the  problem  of  finding  quantity  hypotheses.  The  basic  algorithm  is  illustrated  in 
figure  52.  The  quantity  spaces  arc  updated  by  using  the  comparison  table  to  determine  first  what  numbers 
require  quantity  spaces,  and  then  to  determine  what  elements  should  be  in  each  one.  A  number  requires  a 


Fig.  52.  F  inding  quantity  hypotheses 

Procedure  Quantity  Change  Analysis 

1.  Retrieve  comparison  table  for  situation. 

2.  Create  and  update  the  quantity  spaces  for  the  quantities 
mentioned  in  the  comparison  table. 

3.  Update  the  state  of  the  comparison  table. 

4.  Filter  the  comparison  table  by  removing  those 
entries  whose  comparisons  aren’t  neighbors. 

5.  For  each  element  remaining, 

5.1  Determine  if  the  inequality  relationship  can  change. 

5.2  If  it  can,  create  a  quantity  hypothesis  to  represent 
that  change.  Record  any  assumptions  about  rate  required 
for  the  change  to  occur. 

6.  Generate  quantity  hypotheses  to  represent  all  possible 
combinations  of  occurrences  of  the  single  change 
hypotheses,  pruning  out  hypotheses  which  are  moot 

or  that  are  explicitly  excluded  by  doma i n-spec i f i c  limit  rules. 

7.  Apply  the  equality  change  law  to  determine  which  quantity 
hypotheses  represent  changes  which  can  occur  in  an  instant. 

Call  the  set  which  occur  in  an  instant  ECL-QHS(S).  and  call  the 
remainder  NON-QHS(S). 

8.  If  none  of  the  members  of  ECL-QHS(S)  requires  an  assumption 
about  rate,  then  let  NEXT-QHS(S)  be  ECL-QHS(S).  Otherwise,  let 
NEXT-QMS(S)  be  empty. 
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quantity  space  if  it  is  mentioned  in  any  element  of  the  comparision  table.1  A  number  is  an  element  in  the 
quantity  space  of  another  number  if  there  is  an  element  in  the  comparison  table  that  compares  it  with  that 
number.  Since  the  comparison  table  was  constructed  using  all  the  comparisons  required  to  find  the  \iew  and 
process  structures,  and  augmented  by  any  inequality  information  required  in  resolving  influences,  we  arc 
guarentecd  that  quantity  spaces  constructed  from  it  in  this  manner  contain  all  the  information  necessary  to 
predict  state  changes. 

Once  the  elements  for  each  quantity  space  have  been  found,  an  effort  is  made  to  establish  the 
ordering  relationships  betw  een  the  elements.3  This  ordering  information  is  used  to  compute  die  neighbors  in 
the  quantity  space.  The  neighbors,  as  defined  previously,  arc  just  the  elements  which  are  ,.  .  er  greater  or  less 
than  the  number,  with  no  other  clement  in  between  (the  set  of  elements  which  are  equal  to  it  is  computed  as 
well).  The  comparison  table  is  updated  by  recording  what  the  ordering  between  the  numbers  mentioned  in 
each  entry  actually  is.  and  entries  representing  comparisons  between  non-neighboring  numbers  are  ignored 
(step  4)  since  they  w  ill  be  irrelevant  -  by  definition,  the  quantity  will  reach  the  neighbor  first. 

Step  5  involves  finding  the  possible  changes  for  each  relevant  comparison.  The  current  relationship 
between  die  comparison’s  quantities  and  their  ds  values  arc  used  to  look  up  in  a  table  (described  in  section 
3.6.4)  what  the  next  relationship  can  be.  If  some  piece  of  information,  such  as  a  d$  value,  is  missing  or  the 
next  relationship  is  the  same,  dicn  the  comparison  is  ignored.3  If  die  relationship  can  change,  dicn  a  quantity 
hypothesis  is  created  to  represent  that  possibility  and  annotated  with  any  assumptions  it  requires  about  the 
rates  (step  5.2). 

Given  the  collection  of  hypodicsi/.cd  single  changes,  step  6  computes  the  collection  of  hypotheses 
representing  die  prospect  that  more  than  one  of  these  changes  occurs  at  once.  It  is  important  to  prune 
hypotheses  as  quickly  as  possible,  since  if  dierc  arc  n  hypotheses  representing  a  single  change  then  in  theory 
there  can  be  2n-i  total  hypotheses.  In  practice  dierc  arc  rarely  this  many,  for  several  reasons.  First,  certain 
conjunctions  can  be  ruled  out  because  one  change  makes  the  other  moot.  For  example,  it  makes  no  sense  to 
consider  the  possibility  that  two  flow  rates  equalize  at  die  same  time  one  flow  stops,  since  one  of  die  flow  rates 
will  no  longer  exist.  The  constraint  network  mentioned  above  is  used  to  find  such  moot  conjunctions  and 
prune  them  as  dicy  arc  generated.  Second,  other  conjunctions  will  violate  consistency  constraints,  either 
general  ones  such  as  continuity  or  domain-specific  ones,  such  as  implied  by  correspondences  between 
functionally  dependent  quantities  (e.g.,  die  arguments  about  impossible  changes  in  die  end  of  section  8.2). 
Finding  out  which  combinations  arc  consistent  in  Uiis  way  is  fairly  expensive,  since  it  requires  explicitly 
generating  the  situation  which  occurs  next,  a  procedure  we  will  defer  explaining  until  die  discussion  of 
envisioning.  Limit  rules,  introduced  in  Section  8.1.6.  provide  a  mechanism  to  reduce  diis  burden.  A 
proposed  quantity  hypothesis  is  tested  against  a  database  of  limit  rules,  which  can  either  let  it  pass,  rule  out 


1.  Ihc  only  exception  is  zero  -  no  quantity  space  is  ever  created  for  it.  In  addition,  ordering  statements 
involving  zero  arc  treated  as  statements  about  signs,  for  efficiency  reasons.  Sec  die  appendix  for  details. 

2.  In  GIZMO,  this  consists  of  queries  to  a  specialized  quantity  implementation  which  will  give  an  answer  if  it 
follows  from  known  inequalities  and  transitivity.  Once  again,  sec  die  ppendix  for  details. 

3.  An  alternative  is  to  search  the  possible  orderings  between  the  numbers.  Given  the  way  in  which  the 
comparison  table  is  constructed,  however,  die  ordering  information  will  always  be  known  when  envisioning 
so  this  alternative  was  deemed  undesirable. 
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just  that  hypothesis,  or  rule  out  all  hypotheses  which  contain  diat  hypothesis.  So  far,  the  only  use  of  limit 
rules  has  been  to  "routini/e"  conclusions  that  GIZMO  can  make  without  them,  albeit  with  much  greater 
effort.1  Although  limit  rules  must  provide  reasons  for  their  conclusions,  if  the  answer  they  return  is  all.  (as 
the  rules  in  the  previous  chapter  did),  then  no  conjunctive  hypotheses  involving  the  rulcd-out  hypothesis  will 
ever  be  generated.  I  bus  even  if  some  of  the  facts  which  support  the  limit  rule's  conclusion  arc  withdrawn, 
limit  analysis  must  be  performed  again  to  compute  the  entire  set  of  possible  changes. 

I  he  equality  change  law  is  applied  in  step  7.  Recall  that  the  equality  change  law  says  that,  except  in 
two  cases,  all  changes  require  an  interval  of  time  to  occur.  The  first  case  is  lhat  the  change  in  the  ordering 
relationship  is  away  from  equality ;  this  respects  the  fact  that  numbers  aren't  "fuz/.y".  The  second  case  is  when 
a  change  to  equality  is  occ tiring  between  quantities  which  were  influenced  away  from  equality  for  only  an 
instant.  This  case  assumes  that  die  influences  of  processes  arc  finite.  Finding  hypodicses  w  hich  satisfy  case  1 
is  simple;  they  arc  exactly  the  hypotheses  for  which  one  of  the  current  relationships  is  equality.  Satisfying 
case  2  requires  using  some  additional  information  carried  along  with  die  situation.  In  particular,  if  the 
situation  arose  by  a  hypothesis  satisfy ing  case  1  of  the  equality  change  law,  dicn  die  situation  includes  die 
additional  assertion  diat  one  number  is  "starts  infincsimally  greater  dian"  die  other,  such  as 

ACQy]  I>  A[Q2] 

A  consequence  of  believing  the  assertion  above  is  that  any  hypothesized  change  which  includes  Oj  and  Q2 
becoming  equal  must  occur  in  an  instant.  The  set  of  quantity  hypotheses  which  satisfy  cither  case  of  the 
equality  change  law  comprise  the  set  ecl-qhs,  and  those  which  don't  comprise  the  set  non-qhs. 

Finally,  in  step  8  the  subset  of  quantity  hypotheses  which  satisfy  die  equality  change  law  is  examined 
to  see  if  any  of  diem  require  additional  assumptions  about  rates  to  be  valid.  If  none  of  diem  do,  then  die  next 
change  that  occurs  must  be  one  of  die  hypodicses  satisfying  die  equality  change  law,  and  so  the  set  next-qhs 
is  made  equal  to  ecl-qhs  to  reflect  this  fact.  Otherwise  it  is  not  clear  whether  or  not  a  change  from  ecl-qhs 
will  occur,  so  next-qhs  is  set  to  the  empty  set  to  inform  the  top-level  limit  analysis  procedure  of  this  fact. 

Now  let  us  return  to  the  problem  of  testing  the  consistency  of  a  quantity  hypothesis.  As  mentioned 
previously,  we  will  defer  discussion  of  how  die  next  situation  is  generated  for  later.  For  now,  it  is  enough  to 
know  diat  it  can  be  done,  and  certain  inconsistencies  can  be  detected  in  die  course  of  doing  so.  If  a  consistent 
next  situation  can  be  constructed,  then  several  additional  tests  arc  made.2  First,  the  inequality  constraints 
implied  by  named  functions  (such  as  the  function  dial  determines  pressure  from  level)  arc  imposed.  Second, 
quantity  space  continuity  is  tested  if  some  individual  has  vanished  in  the  new  situation.  If  no  individual 
vanishes,  then  these  constraints  arc  usually  satisfied  by  the  procedure  which  generates  possible  changes,  and 
violations  are  detected  by  die  procedure  which  constructs  die  next  situation.  Should  an  individual  vanish, 
however,  extra  work  is  required  to  detect  continuity  violations.  Recall  die  No-Sinks  limit  rule  in  die  fluids 

1.  This  "compiling"  of  die  domain  knowledge  is  currently  done  by  hand;  an  interesting  learning  problem  is 
to  acquire  such  rules  from  cxpciicncc.  Such  rules  could  also  be  used  to  encode  heuristic  know  ledge,  but  in 
that  case  the  implementation  would  have  to  be  extended  to  allow  graceful  retraction  of  their  results. 

2.  When  performing  limit  analysis  in  die  course  of  envisioning  diese  tests  arc  interleaved  with  the  situation 
generation  performed  by  that  procedure,  thus  saving  some  work. 
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description  of  the  previous  diopter.  Consider  again  a  liquid  flow  between  two  containers.  One  possibility  is 
that  the  liquid  in  the  source  will  vanish,  as  the  amount  of  it  reaches  zero.  Another  possibility  is  that  the 
pressure  in  the  two  containers  will  equalize.  If  the  heights  of  the  bottoms  are  the  same  then  the  first  change  is 
impossible,  since  it  would  require  that  the  pressure  in  the  source  was  less  than  the  pressure  in  the  destination 
(assuming  explicit  functions  linking  level  and  pressure,  as  noted  prev  iously).  This  v  iolation  of  continuity  will 
not.  however,  be  detected,  since  the  liquid  in  the  source,  and  hence  its  pressure,  no  longer  exist!  As  alluded  to 
previously,  the  solution  is  to  re-install  the  facts  about  the  quantities  of  the  vanished  individual  as  if  it  existed, 
and  then  look  for  continuity  violations.  This  procedure  is  somewhat  gory,  so  we  won’t  look  into  it  further. 
The  final  test  is  for  os  continuity,  and  it  is  performed  by  resolving  influences  in  the  new  situation  and  seeing 
whether  the  d  value  of  any  quantity  jumps  from  -t  to  1  or  l  to  -1  from  the  current  situation  to  the  new  one. 
If  any  do.  then  the  quantity  hypothesis  is  marked  as  inconsistent. 
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10.  Measurement  interpretation 

1  his  chapter  describes  an  algorithm  which  constructs  interpretations  of  measurements  taken  at  an 
instant  (the  "one-look"  case  described  in  section  5.5).  The  pruning  heuristics  described  in  section  5.5  arc  not 
implemented  because  the  domain  models  considered  are  not  complex  enough  to  warrent  them.  The  input  to 
this  algorithm  is  a  situation  and  a  set  of  observations,  and  die  output  is  a  set  of  interpretations  describing  how 
die  possible  processes  in  the  situation  could  explain  those  observations.  First  we  describe  die  interpretation 
algorithm,  dicn  a  procedure  for  automatically  generating  diagnostics  given  a  set  of  interpretations,  and  finally 
illustrate  these  procedures  with  an  example. 

lO.t  The  algorithm 

We  assume  the  situation  s  has  been  elaborated,  i.c..  all  die  possible  view  and  process  instances  in  it 
have  been  found.  The  set  of  observations,  called  obs.  consists  of  expressions  of  the  form 

(Measured  (has-value  (s  (D  <quantiiy>))  <1.  0,  or  !>)) 

where  <quamity>  is  a  reference  to  a  quantity  belonging  to  an  individual  in  s.  Figure  53  presents  the 
interpretation  algorithm.  In  the  course  of  setting  up  the  situation  to  be  interpreted  several  of  the  instances 
may  have  their  statuses  determined  -  for  example,  measuring  a  property  of  an  individual  implies  that  the 
individual  does  indeed  exist.  In  addition,  the  user  is  queried  to  determine  if  dicre  arc  more  assumptions  to  be 
made  about  the  statuses  of  view  or  process  instances.  The  process  and  view  instances  whose  statuses  are 
unknown  arc  used  to  create  a  complete,  irredundant  generator  which  w  ill  produce  all  and  only  the  consistent 
combinations  of  status  assignments.  The  appendix  describes  the  generator  in  more  detail;  the  only  property 
we  need  to  know  here  is  that  it  can  be  informed  by  adding  clauses  to  the  I  MS,  as  happens  when  facts  are 
asserted. 

Recall  that  an  interpretation  consists  of  a  set  of  status  assignments  and  the  collection  of  unit  cause 
’  ypodieses  (abreviated  UCH)  that  provide  its  account  of  the  measured  ds  values.  Hie  search  for 
interpretations  proceeds  by  asking  the  generator  for  a  collection  of  status  assignments,  constructing  an 
interpretation  which  represents  the  hypothesis  that  the  collection  is  responsible  for  die  measurements,  and 
testing  this  hypothesis  to  sec  if  it  is  consistent,  lhc  first  step  (2.1)  in  testing  the  hypothesis  is  to  resolve 
influences.  In  step  2.2,  a  UCII  is  constructed  to  account  for  each  measurement  in  the  context  of  the 
interpretation  hypothesis,  and  is  locally  tested  for  consistency  by  seeing  if  the  sign  of  the  derivative  for  die 
measured  quantity  computed  by  influence  resolution  matches  the  obsened  value.  If  the  D$  value  is  known 
but  different  dien  the  UCII,  and  hence  the  whole  interpretation,  is  inconsistent.  If  die  ds  value  is  unknown, 
then  the  assumptions  needed  to  make  it  be  the  measured  value  are  recorded  as  part  of  the  UCH. 

Suppose  several  UCH\  require  making  assumptions.  Then  it  is  possible  that  a  consistent  UCH  can 
be  constructed  for  each  measurement,  but  when  taken  together  the  assumptions  dies  make  imply  a 
contradiction.  Step  2.3.2  takes  this  possibility  into  account  by  assuming  the  various  facts  needed  to  make  die 
LiCH's  valid  and  propagating  the  results.  If  any  contradictions  ensue,  the  interpretation  is  marked  as 
inconsistent. 

When  an  interpretation  is  found  to  be  inconsistent,  cither  locally  due  to  the  failure  to  find  a 
consistent  UCII  for  some  measurement,  or  globally  due  to  inconsistent  assumptions  made  in  constructing 
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ig.  53.  One-look  measurement  interpretation  algorithm 


; Let  OBS  be  the  set  of  measurements 
Procedure  Interpret 


1.  Make  status  assignments  to  process  and  view  instances 
wherever  possible 


2.  Perform  a  dependency-directed  search  over  the  status 

assignments  remaining.  For  each  set  of  status  assumptions, 

2.1  Resolve  influences. 

2.2  For  each  measurement  M  in  OBS, 

2.2.1  Let  0  be  the  quantity  described  by  the  measurement  M. 

VAL  be  the  D$  value  measured,  and  UCH  be  the  Unit  Cause 
Hypothesis  which  is  to  account  for  M  in  this 
interpretation. 

2.2.2  If  DS[Q]  *  VAL.  then  mark  UCH  as  consistent 

2.2.2  If  DS[Q]  is  known,  then  mark  UCH  as  inconsistent 

2.2.3  Otherwise, 

2. 2. 3.1  If  Q  directly  Influenced,  mark  UCH  as  consistent 
and  record  the  inequality  assumption  needed  to 
insure  DS[Q]  *  VAL 

2. 2. 3. 2  If  0  indirectly  Influenced,  mark  UCH  as  consistent 
and  record  VAL  as  DS[Q] 

2.3  Let  UCHS  be  the  set  of  Unit  Cause  Hypotheses  constructed  in 

the  previous  step,  and  INTERP  be  the  interpretation  representing 
the  current  collection  of  status  assignments. 

2.3.1  If  any  UCH  in  UCHS  is  marked  as  inconsistent,  mark 
INTERP  as  Inconsistent,  giving  the  inconsistent  UCHs 
as  a  reason,  and  install  appropriate  nogood  sets. 

2.3.2  Temporarily  make  any  assumptions  required  by  the  UCHs. 

2.3.2. 1  If  any  contradictions  arise,  mark  INTERP  as 

inconsistent  and  install  appropriate  nogood  sets. 


2. 3. 2. 2  Otherwise,  mark  INTERP  as  consistent. 


I 
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I'CIIs.  nogood  sets1  are  constructed  to  prevent  the  generator  from  trying  that  collection  of  status  assignments 
again,  thus  reducing  the  search  space.  The  nogood  sets  will  always  include  some  status  assignments.  If  die 
nogood  is  constructed  for  a  particular  UCII  then  it  will  include  the  measurement  the  UCII  was  intended  to 
explain,  and  if  the  nogood  is  constructed  from  a  global  contradiction  it  will  contain  all  the  measurements. 

Which  status  assignments  should  be  included  in  a  nogood  set?  The  notion  of  p- influencers 
introduced  in  section  5.5  (the  set  of  instances  which  provide  direct  or  indirect  influences  on  a  particular 
quantity)  would  allow  exactly  that  subset  of  the  status  assignments  which  was  responsible  for  the  particular  os 
measurement  to  be  in  the  nogood  set.  This  would  provide  maximum  constraint  by  ensuring  that  no 
hypothesis  containing  those  assignments  as  a  subset  would  ever  be  generated  again.  However,  finding  the 
p-influencers  proved  difficult  in  this  implementation:  since  qualitative  proportionalities  arc  often  introduced 
by  virtue  of  type  predicates  as  well  as  instances,  additional  indexing  is  required  to  construct  die  set  of 
p-influenccrs.  Thus  it  proved  simpler  to  just  use  all  of  the  status  assumptions  in  the  nogood  set.  While  it 
doesn't  prune  the  search  space  as  much  as  using  p-influencers  would,  it  docs  provide  some  constraint  if  the 
same  situation  is  examined  with  two  non-disjoint  sets  of  measurements.  W'c  will  sec  an  example  of  this  in 
section  10.3. 

10.2  Making  diagnoses 

Given  a  collection  of  consistent  interpretations  for  a  set  of  measurements,  predictions  can  be  made 
about  die  values  of  other  measurable  parameters.  By  testing  diese  predictions  the  set  of  consistent 
interpretations  can  be  further  constrained.  Figure  54  shows  how.  The  first  step  is  simply  to  find  all 
measurements  that  have  not  yet  been  made.  Step  2  classifies  each  interpretation  according  to  what  it  predicts 
about  that  measurement,  using  information  saved  during  the  intciprctation  process.  If  die  interpretation 
doesn't  constrain  the  quantity,  dicn  for  simplicity  it  is  placed  in  all  die  sets,  even  diough  it  is  possible  diat  the 
assumption  necessary  to  make  it  be  some  particular  value  might  lead  to  a  global  contradiction.  If  it  is 
necessary  to  make  absolutely  sure  diat  only  consistent  diagnoses  arc  made,  then  a  test  similar  to  the  global 
consistency  test  in  procedure  interpret  could  be  used.  Should  dicre  be  only  one  consistent  interpretation  the 
table  constitutes  a  set  of  predictions,  since  an  interpretation  can  assign  at  most  one  Ds  value  to  each  quantity. 
Otherwise,  the  interpretations  associated  with  each  possible  value  of  a  measurable  parameter  arc  presented  as 
a  diagnostic.  GIZMO  currently  it  makes  no  further  use  of  die  results  itself,  although  die  results  arc  presented 
to  die  user  on  request. 

10.3  Three  containers 

ITiis  example  consists  of  three  containers  F,  G.  and  h.  each  containing  some  water,  as  depicted  in 
figure  40.  F  and  G  arc  connected  by  fluid  padi  pi  and  G  and  h  arc  connected  by  fluid  path  P2.  Figure  55 
describes  the  scenario.  Suppose  we  measure  the  level  in  G  and  find  dial  it  is  decreasing.  What  could  be 


1.  A  nogood  set  is  a  collection  of  premises  which  are  mutually  contradictory.  Truth-maintencc  systems 
usually  include  some  means  of  annotating  these  sets  when  discovered,  to  prevent  wasting  extra  effort  deriving 
their  consequences. 
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Fig.  54.  Diagnosis  algorithm 

: Le t  OBS  be  the  set  of  measurements  taken 

;  Le  t  INtERPS  tie  the  set  of  consistent  interpretations  of  OBS 
Procedure  Diagnosis 

1.  Let  NEW  be  empty.  For  each  type  0  of  measurable  parameter, 

1.1  For  each  individual  I  that  has  Q. 

1.1.1  If  Q ( I )  is  not  constrained  by  OBS,  add  it  to  NEW 

2.  For  each  quantity  Q  in  NEW,  construct  a  table  entry 
consisting  of  three  sets,  INCREASE,  DECREASE,  and  CONSTANT. 

2.1  For  each  interpretation  I  in  INTERPS. 

2.1.1  If  in  I  0S[Q]  •  1.  add  I  to  INCREASE 

2.1.2  If  in  I  0S[Q]  •  0.  add  I  to  CONSTANT 

2.1.3  If  in  I  DS[Q]  -  -1,  add  I  to  DECREASE 

2.1.4  If  in  I  Ds[0]  is  unknown,  add  it  to 

INCREASE,  DECREASE,  and  CONSTANT. 

3.  If  there  is  just  one  interpretation  in  INTERPS,  present 
the  table  contents  as  predictions. 

4.  Otherwise,  present  the  table  contents  as  a  diagnosis. 


causing  this? 

To  begin  with,  wc  must  find  the  possible  view  and  process  instances.  If  we  perform  elaboration  on 
die  situation  3C -start,  wc  will  get  view  instances  representing  each  state  of  water  (the  only  substance  in  this 
domain)  in  each  container  and  representing  the  possibility  for  flow  through  die  two  paths.  The  only  process 
instances  will  be  fluid  flow,  one  instance  corresponding  to  flow  in  each  direction  of  each  padi.  No  heat  paths 
were  specified,  hence  no  instances  of  heat  flow  were  found,  and  therefore  no  instances  of  boiling  exist.  Figure 
56  provides  die  names  of  diese  instances.  The  initial  conditions  in  the  scenario  ensure  that  only  water  in  die 
liquid  form  exists,  and  wc  will  further  assume  that  all  die  paths  can  support  flow  in  all  directions  (i.e.,  that  all 
die  instances  of  l  iquid-f low-supporting  arc  active).  The  only  instances  whose  statues  arc  not  known  arc  the 
four  process  instances,  and  so  diey  will  comprise  die  search  space. 

If  wc  trace  the  interpretation  search,  wc  see: 

Beginning  search  on  3C-START... 

Status  Assignment  1 

All  assumed  inactive. 

--  Inconsistent,  for  LOCAL  reasons. 

Status  Assignment  2 
PI-3 

--  Inconsistent,  for  LOCAL  reasons. 

Status  Assignment  3 
PI-2 

--  Consistent. 
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I'iji.  55.  Three  Containers  Scenario 

(defscenario  three-containers 
(Individuals  F  G  H  PI  P2 

(c-s  WATER  LIQUID  F) 

(C-S  WATER  LIQUID  G) 

(C-s  WATER  LIQUID  H)) 

(Facts  (Container  F) 

(Container  G) 

(Container  H) 

(Fluid-Path  PI) 

(Fluid-Path  P2 ) 

(Fluid-Connection  PI  (c-s  WATER  LIQUID  F)  (c-s  WATER  LIQUID  G)) 

(Fluid-Connection  PI  (c-s  WATER  LIQUID  G)  (c-s  WATER  LIQUID  F)) 

(Fluid-Connection  P2  (c-s  WATER  LIQUID  G)  (c-s  WATER  LIQUID  H)) 

(Fluid-Connection  P2  (c-s  WATER  LIQUID  H)  (c-s  WATER  LIQUID  G))) 

(Always  (Equal-To  (A  (nax-height  PI))  (A  ((height  bottom)  G ) ) ) 

(Lqual-To  (A  (nax-height  PI))  (A  ((height  bottom)  F))) 

(Equal-To  (A  (max-height  P2))  (A  ((height  bottom)  G ) ) ) 

(Equal-To  (A  (max-height  P2))  (A  ((height  bottom)  H))) 

( A 1 igned  PI) 

(Aligned  P2)) 

(In-Situation  3C-START 

(Individuals  F  G  H  PI  P2 

(c-s  WATER  LIQUID  F) 

(C-S  WATER  LIQUID  G) 

(c-s  WATER  LIQUID  H)) 

(Facts  ( Greater-than  (A  ( amount-of- i n  water  liquid  F)) 
ZERO) 

(Greater-than  (A  ( anount-of- in  water  liquid  G ) ) 
ZERO) 

(Greater-than  (A  ( amount-of- in  water  liquid  H)) 
ZERO) 

(Equal-to  (A  ( amount-of - i n  water  gas  F ) ) 

ZERO) 

(Equal-to  (A  ( amount-of- in  water  gas  G)) 

ZERO) 

(Equal-to  (A  ( amount-of- i n  water  gas  H)) 

ZERO)))) 


Status  Ass  ignment  4 
PI-1 

--  Consistent. 

Status  Assignment  5 
PI-1 
PI-3 

--  Consistent. 

States  Assignment  6 
PI-1 
PI-2 

--  Consistent. 

Status  Assignment  7 
PI -0 

—  Inconsistent,  for  LOCAL  reasons 
Status  Assignment  8 
PI-0 
PI-3 

--  Inconsistent,  for  LOCAL  reasons 
Status  Assignment  9 


6 


9 
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Fig.  56.  View  and  process  instances  for  three  containers  scenario 


For  Sit 
IVI-0 


>S(WATER,  LIQUID.  F). 

0 

>S(WATER,  LIQUID.  G). 


uation  3C-START 

VIEW- INSTANCE (LIQUID- FLOW-SUPPORTING.  C- 
C-S(WATER,  LIQUID.  G),  PI] 

I VI - 1 :  VIEW-INSTANCE(LIQUID-F  LOW -SUP PORTING .  C- 
C-S(WATER ,  LIQUIO.  F).  PI) 

IVI-2 :  VIEW-INSTANCE (LIQUID-FLOW -SUP PORTING.  C-S(WATER,  LIQUID.  G), 
C - S ( WATER ,  LIQUID,  H ) ,  P2) 

IVI-3 :  VI EW- INSTANCE (LI QUID- FLOW-SUPPORTING.  C-S(WATER,  LIQUID.  H). 
C - S ( WATE R .  LIQUID.  G).  P2) 


!) 


I VI -4 
I VI  - 5 
I V I  -6 
I VI  -  7 
I V I -8 


VIEW-INSTANCE(CONTAINEO-STUFF 
VIEW- INS TANCE(CONTAINED-STUFF , 
VIEW- INSTANCE (CONTAINED- STUFF . 
VIEW- I NSTANCE( CONTAINS D-STUFF , 
VIEW-INSTANCE(CONTAINED-STUFF, 


WATER,  LIQUID) 

F,  WATER.  GAS) 

G,  WATER.  LIQUID) 

G.  WATER.  GAS) 

H,  WATER,  LIQUID) 


I V I  —  9 

VIEW- I NSTANCE( CON TAINE 0-STUFF 

.  H,  WATER, 

GAS) 

PI-0: 

PROCESS- INSTANCE (LIQUID-FLOW, 
IVI-0) 

C-S(WATER, 

LIQUID. 

F). 

C-S(WATER. 

LIQUID, 

G). 

PI . 

PI-1: 

PROCESS- INSTANCE (LIQUID- FLOW. 

I VI - 1 ) 

C-S(WATER . 

LIQUID. 

G). 

C-S(WATER , 

LIQUID. 

F). 

PI, 

PI-2: 

PROCESS- INSTANCE (LIQUID-FLOW. 

IVI-2) 

C-S(WATER , 

LIQUID. 

G). 

C-S(WATER , 

LIQUID, 

H). 

P2 , 

PI-3: 

PROCESS- INSTANCE (LIQUID-FLOW, 
IVI-3) 

C-S(WATER, 

LIQUID, 

H). 

C-S(WATER , 

LIQUID. 

G). 

P2 , 

--  Consistent. 

There  are  5  consistent  interpretations. 


Notice  that  the  generator  is  informed  by  the  constraint  that  die  quantity  conditions  be  consistent,  for  although 
combinatorially  sixteen  status  assignments  arc  possible,  only  the  nine  assignments  which  result  in  unique 
inequality  relationships  between  pressures  arc  generated.  Of  these  nine,  four  arc  inconsistent  with  the 
measured  decrease  in  the  level  in  G.  The  consistent  interpretations  are  show  n  graphically  in  figure  57.1  If  we 
ask  for  a  diagnosis,  we  get: 


Suggested  Measurements: 


For  (M  LEVEL(C-S(WATER.  LIQUIO,  F ) )  3C-START): 
Increasing  indicates  M-I-5,  M-I-4,  M-I-3. 

Constant  indicates  M-I-2. 

Decreasing  indicates  M-I-8. 


For  (M  LEVEL(C-S(WATER.  LIQUID,  H) )  3C-START) : 
Increasing  indicates  M-I-8,  M-I-5.  M-I-2. 

Constant  indicates  M-I-3. 

Decreasing  indicates  M-I-4. 


Suppose  we  measure  the  level  in  f  and  find  that  it  is  decreasing.  If  we  trace  the  interpretation  search 
again,  we  sec: 


1.  Notice  that  if  we  knew  ihc  measurement  was  taken  over  an  interval  of  time  rather  than  an  instant,  w>e 
could  further  rule  out  m-i-2  and  m-i-3.  since  they  describe  situations  that  can  only  last  for  an  instant. 
GIZMO'S  algorithms  assume  the  measurement  was  made  at  an  instant. 
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1  ig.  57.  Consistent  interpre 

tations  for  Ds[ievel(G)]  -  -1 

1  he  active  instances  of  lltiid 

flow  are  indicated  by  arrows  pointing 

in  the  direction  of  the  (low. 

M-I-2:  F 

G  -->  H 

M-I-3:  F 

<--  G  H 

M-I-4:  F 

<--  G  <--  H 

M-I-5:  F 

<--  G  -->  H 

M-I-8:  F 

-->  G  -->  H 

Beginning  search  on  3C-START... 

Status  Assignment  1 
PI-3 

Status  Assignment  2 
PI-2 

--  Inconsistent,  for  LOCAL  reasons. 

Status  Assignment  3 
PI-1 

--  Inconsistent,  for  LOCAL  reasons. 

Status  Assignment  4 
Pl-1 
PI-3 

--  Inconsistent,  for  LOCAL  reasons. 

Status  Assignment  5 
PI-1 
PI-2 

--  Inconsistent,  for  LOCAL  reasons. 

Status  Assignment  6 
PI-0 

Status  Assignment  7 
PI-0 
PI-3 

Status  Assignment  8 
PI-0 
PI-2 

--  Consistent. 

There  is  one  consistent  interpretation. 

'Hie  assignments  where  no  comment  was  made  as  to  consistency  were  immediately  ruled  out  by  nogood  sets 
created  during  the  previous  search,  thus  only  five  status  assignments  were  considered  in  detail.  Of  these  five, 
only  m-i-8  is  consistent  with  both  measurements.  If  we  ask  for  a  new  diagnosis  we  get  a  prediction: 

There  is  just  one  consistent  interpretation. 

It  predicts: 

(M  Ds[LEVEL(C-S( WATER,  LIQUID,  H))]  3C-START)  •  1 


Given  the  interpretations  depicted  above,  this  answer  is  correct. 


II.  Fniisioning 


Fnvisioning  is  a  technique  that  generates  all  possible  outcomes  of  some  initial  situation.  Although 
env  isioning  is  important  m  its  <m  n  right  as  a  means  of  making  predictions,  it  also  illustrates  how  the  basic  QP 
deductions  can  be  weaved  together  to  perform  more  complex  deductions.  This  chapter  describes  the  basic 
envisioning  algorithm  and  discusses  two  critical  problems  which  arise  in  envisioning  --  namely  how  to  match 
situations  and  how  to  decide  what  a  situation  looks  like  after  changes  have  occurcd,  the  frame  problem  for 
simulation.  The  results  of  the  algorithm  on  several  examples  arc  presented.  Also  rules  are  described  for 
summarizing  die  envisionment  in  order  to  draw  conclusions  about  final  states,  changing  equilibriums,  and 
oscillations. 


11.1  The  algorithm 

Figure  58  describes  the  basic  algorithm.  Roughly,  here's  how  it  works.  If  the  initial  situation  is  not 
completely  determined,  it  is  either  because  die  status  of  some  process  or  view  instance  is  unknown  or  some 
influences  arc  unresolved.  In  this  case,  the  envisioner  creates  new  situations  to  represent  die  various 
possibilities  (step  2).  The  bulk  of  the  envisioner  consists  of  two  loops.  The  outer  loop  uses  limit  analysis  to 
determine  what  state  changes  can  occur  for  each  situation.  The  inner  loop  constructs  die  situation  which 
would  result  from  each  quantity  hypodiesis.  testing  to  see  if  that  situation  has  been  generated  before.  If  it  has, 
then  the  fact  diat  the  transition  being  considered  leads  from  die  current  state  to  the  suite  matched  is  noted. 
Otherwise,  the  new  state  (or  suites,  if  some  influences  cannot  be  resolved)  representing  die  results  of  that 
change  is  added  to  die  list  of  situations  generated  so  far  and  queued  so  that  changes  in  it  will  be  determined  in 
turn. 

The  sections  which  follow  describe  certain  aspects  of  this  algorithm  in  detail. 

11.1.1  Finding  completions 

Indeterminacy  can  arise  during  envisioning  in  two  ways.  First,  die  initial  suite  may  not  be 
completely  determined  (step  2).  Second,  influence  resolution  may  yield  ambiguities,  preventing  full 
know  ledge  of  the  os  values  for  a  situation  (step  3. 2. 3.2),  In  both  cases,  new  situations  arc  constructed  which 
represent  the  different  alternatives  for  the  undetermined  information.  The  situations  which  represent 
alternative  suitus  assignments  arc  called  s-completions.  The  situations  which  represent  alternative  influence 
resolutions  arc  called  rcumpletions. 

S-completions  arc  generated  by  a  dependency-directed  search  over  the  unknown  status  assignments, 
creating  a  situation  for  each  consistent  set,  A  similar  dependency-directed  search  over  unknown  os  values  is 
used  to  gencr.ite  r-completions,  with  one  additional  subtlety.  Some  possible  values  arc  ruled  out  by 
continuity  constraints  -  if.  for  example,  a  o$  value  was  -l  in  a  previous  situation,  then  by  continuity  it  cannot 
be  l  in  the  next  situation.  These  constraints  are  honored  by  passing  in  assumptions  about  which  D$  values  arc 
illegal  due  to  continuity  constraints. 
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I  ig.  58.  I  in  isioning  algorithm 


Procedure  Envision 


1.  Let  S  be  the  initial  situation  and  the  set  SITUATIONS  initially 
be  empty. 

2.  If  the  process  structure  or  view  structure  of  S  is  incomplete, 
then  let  QUEUE  -  SITUATIONS  ■  R-COMPLET I0NS( S-COMPLE T I0NS( S) ) . 


if  any  Ds  values  in  S  are  unknown,  let 
QUEUE  =  SITUATIONS  »  R-COMPLETIONS(S) 

otherwise,  let  QUEUE  •  SITUATIONS  •  {S} 

3.  Wh  i  ■ s  QUEUE  is  not  empty,  let  SI  ■  first(QUEUE)  and 
QUEb;  -  rest(QUEUE). 

3.1.  Perform  limit  analysis  on  SI.  Initialize  QH-QUEUE 
to  be  the  set  of  quantity  hypothesis  which  result. 

3.2.  While  QH-QUEUE  is  not  empty,  let 
QH  «  head(QH-QUEUE) ,  QH-QUEUE  ■  tai  1 (QH-QUEUE) 

3.2.1  Let  S2  »  NEXT-SITUATION (SI,  QH). 

3.2.2  If  any  situation  S3  £  SITUATIONS  matches  S2, 
install  a  transition  pointer  from  SI  to  S3  via  QH. 

'  3.2.3  Otherwise,  install  a  transition  pointer  from  SI  to  S2 

1  via  QH. 

3. 2. 3.1  If  S2  is  r-complete  then  add  SZ  to  QUEUE  and 
SITUATIONS. 

3. 2. 3. 2  If  S2  is  not  r-complete  then  add  S2  to 

SITUATIONS  and  its  r-completions  to 

i  SITUATIONS  and  QUEUE. 


11.1.2  Matching 


Matching  situations  is  simple.  Two  situations  arc  identical  if  they  contain  die  same  individuals,  have 
die  same  view  and  process  structures,  if  each  corresponding  quantity  has  the  same  Ds  value,  and  if  each 
quantity  space  is  the  same.  In  practice  it  is  simpler  to  match  over  die  contents  of  the  situation's  comparison 
table  rather  than  the  quantity  spaces,  since  it  contains  die  union  of  die  information  in  die  quantity  spaces, 
for  conciseness,  we  will  call  this  set  of  inequality  information  die  qstalcof  the  situation. 
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11.1.3  Temporal  inheritance 

Deducing  what  the  world  looks  like  after  some  change  has  occurcd  is  a  form  of  the  frame  problem. 
Using  die  QP  ontology  greatly  simplifies  diis  problem.  We  will  stay  entirely  within  QP  theory  by  only 
considering  the  changes  in  inequalities  predicted  by  limit  analysis,  and  ignoring  changes  in  preconditions  that 
might  be  predicted  by  external  theories.1 

The  algorithm  is  formulated  in  terms  of  temporal  inheritance,  carefully  making  assumptions  about 
which  facts  w  ill  hold  in  a  new  situation.  Three  remarks  are  in  order  before  describing  die  procedure  in  detail. 
First,  we  will  call  an  individual  whose  existence  is  predicated  on  the  status  of  a  view  or  process  instance  a 
dynamic  individual,  and  a  static  individual  otherwise.  An  example  of  a  dynamic  individual  is  the  water  in  a 
container,  and  an  example  of  a  static  individual  is  die  container  itself.  Second,  we  will  assume  dial,  unless  we 
know  otherwise,  individuals  which  exist  remain  in  existence.  Third,  note  that  the  inequality  relationships 
which  comprise  die  qstatc  can  be  divided  into  two  classes,  those  which  arc  mentioned  as  possibly  changing  by 
some  quantity  hypothesis  and  diosc  which  aren’t.  The  subset  of  die  qstatc  which  might  change  is  called  fl. 
Importantly,  if  w-e  assume  that  die  change  represented  by  a  particular  quantity  hypothesis  occurs,  we  arc  also 
assuming  diat  the  changes  it  explicitly  mentions  occur  and  no  others  from  fl  change.  This  follows  from  the 
definition  of  a  quantity  hypothesis. 

Figure  59  describes  the  temporal  inheritance  algorithm.  We  begin  by  constructing  a  situation  and 
slices  to  represent  die  individuals  (including  view  and  process  instances)  after  die  change.  Constructing  a 
slice,  of  course,  is  not  tantamount  to  assuming  that  die  individual  actually  exists.  While  we  can  predict  the 
comings  and  goings  of  dynamic  individuals,  any  changes  in  the  existence  of  static  individuals  must  be 
predicated  on  considerations  outside  QP  dicory.  Step  2  acknowledges  diis  fact  by  assuming  diat  any  static 
individuals  remain  in  existence.  Step  3  recognizes  diat.  on  the  whole,  changes  in  preconditions  cannot  be 
predicted  within  QP  theory.  There  arc  certain  exceptions  (such  as  die  Direct,  ion-of  relationship  introduced 
when  discussing  motion  in  section  8.3).  and  diese  are  explicitly  marked  as  being  dcduciblc  and  dius  are 
ignored  by  the  temporal  inheritance  algorithm  because  they  will  automatically  be  recomputed  from  other 
information  for  the  new  situation. 

Step  4  simply  enforces  the  requirement  diat  the  quantity  hypothesis  qh  really  is  the  change  which 
occurs  -  die  subset  of  the  relationships  in  fi  which  it  mentions  change,  and  no  others  in  fi  do.  A  contradicdon 
at  diis  point  indicates  diat  oh  represents  an  impossible  change.  Step  5  implements  the  persistence  assumption 
for  dynamic  individuals;  a  dynamic  individual  w  ill  vanish  only  if  the  inequalities  it  depends  on  change.  Step 
6  implements  the  persistence  assumption  for  inequalities;  namely  diat  an  inequality  will  remain  true  unless 
you  explicitly  know  (or  have  deduced  diat)  it  has  changed. 

'The  motivation  for  the  particular  ordering  in  these  steps  can  best  be  illustrated  by  example.  Clearly 
die  static  individuals  must  be  around  to  determine  whether  or  not  view  and  process  instances  can  be  active 
(since  being  active  implies  die  instance  exists,  and  the  instance  exists  if  and  only  if  die  individuals  which  it 
occurs  among  do),  and  hence  whether  or  not  dynamic  individuals  can  exist.  Consider  a  can  containing  water 

1.  While  predicting  th.it  preconditions  will  change  is  generally  outside  the  rclm  of  QP  theory,  it  appears  diat 
determining  the  effects  of  such  changes  on  QP  descriptions  would  be  a  straightforward  modification  of  the 
algorithm  presented  here. 
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Fig.  59.  Temporal  inheritance 

Procedure  Next-Situation(S,  QH) 

1.  Construct  a  situation  NEW. 

2.  For  each  static  individual  1  in  S, 
assume  i  exists  in  NEW. 

3.  For  each  fact  f  which  serves  as  a  precondition 
in  S  which  cannot  be  recomputed,  assume  f  holds 
between  the  corresponding  slices  of  NEW. 

4.  Assume  the  new  inequalities  specified  by  QH  hold  in  the 
new  situation,  and  that  all  inequalities  in  Q  but 

not  specified  by  the  QH  hold  in  the  new  situation. 

5.  When  consistent,  assume  that  dynamic  individuals 
which  exist  in  S  exist  in  NEW. 

6.  When  consistent,  assume  that  the  inequality  relationships 
in  the  qstate  but  not  in  Q  still  hold. 

Note:  If  any  required  assumption  (steps  2,  3,  and  4)  leads  to  a 

contradiction,  then  the  QH  represents  an  inconsistent  change. 


but  no  steam  which  is  being  heated  on  a  stove.  If  wc  fail  to  distinguish  between  the  inequalities  in  fi  and  its 
complement  with  respect  to  the  qstate  (in  effect,  merging  steps  4  and  6).  then  wc  could  never  conclude  that 
the  w  ater  would  boil,  because  boiling  forces  the  existence  of  steam  in  the  can.  which  would  conflict  with  the 
inherited  assumption  that  the  amount  of  steam  in  the  can  was  zero.  Suppose  wc  inherited  the  existence  of 
dynamic  individuals  before  updating  the  changed  inequalities  (i.c.,  reverse  steps  4  and  5).  Then  we  could 
never  conclude  that,  given  boiling  occurs,  (hat  the  water  will  all  boil  away,  since  the  assumption  that  the  water 
exists  will  contradict  the  assumption  that  the  amount  of  water  becomes  zero.  Steps  5  and  6,  on  the  other 
hand,  can  safely  be  performed  in  cither  order,  since  any  changes  in  existence  will  be  predicated  on  the  set  of 
inequalities  that  change. 


1 1 .2  Summarizing  behavior 

Hnvisioning  results  in  a  description  of  all  behaviors  possible  from  the  initial  situation.  This 
description,  the  envisionment,  can  be  used  to  directly  answer  some  types  of  questions.  To  determine  if  a 
situation  with  particular  properties  is  possible,  for  instance,  one  needs  only  to  inspect  the  envisionment  to  see 
if  <i  suite  having  those  properties  is  present.  If  such  a  state  is  present  then  the  situation  is  possible,  and  if  it 
isn't  then,  because  the  envisionment  is  complete,  the  situation  is  impossible.  However,  further  processing  is 
required  to  answer  other  kinds  of  interesting  questions,  such  as  whether  or  not  the  system  being  analyzed  will 
oscillate  or  what  its  eventual  fate  will  be.  In  addition,  the  envisionment  is  often  large  and  complex; 
summarization  techniques  arc  required  to  make  some  kinds  of  dynamical  information  explicit,  such  as 
changing  equilibriums. 

The  envisionment  is  a  rooted,  directed  graph,  with  the  possible  situations  comprising  the  nodes  and 


lorbus 


-140- 


QP  theory 


(* 

r. 

t 

r 

6 


v 

i 


i 


the  transitions  between  them  (changes  represented  by  quantity  hypotheses)  constituting  the  links.  In  earlier 
work  on  envisioning  (l  orbus,  198 hi],  dynamical  properties  were  identified  with  graph-theoretic  properties  of 
the  envisionment.  The  final  states  a  system  may  take  on  are  identified  with  states  that  have  no  links  leading 
out.  Oscillations  were  identified  with  cycles  in  the  graph.  On  the  whole  this  same  theory  works  with  the 
envisionments  produced  with  QP  theory.  Two  new  factors  require  modifications,  however.  First,  the 
phenomena  of  stutter  means  that  not  all  cycles  correspond  to  oscillations  (sec  section  5.1).  Second, 
ambiguities  can  arise  in  the  Ds  values,  resulting  in  some  links  and  states  which  represent  lack  of  knowledge 
rather  than  state  transitions. 

Figure  60  describes  GIZMO'S  summarization  algorithm.  The  first  step  is  to  make  a  copy  of  the 
envisionment  that  can  be  mutated  to  serve  as  the  summary.  Then  die  situations  which  represent 
r-completions  of  some  situation  arc  merged  together  to  reduce  the  branching  factor  of  the  graph  (step  2). 
Since  stutter  cycles  can  easily  be  distinguished,  it  makes  sense  to  find  them  next  and  replace  those  states  with 
a  description  of  the  overall  behavior  manifested  during  the  cycle  (Steps  3  and  4).  Step  5  simply  finds  and 
records  all  remaining  cycles  in  the  graph.  Finally,  all  states  with  no  links  leading  out  arc  found  and  marked  as 
final  states. 

As  mentioned  previously,  stutter  can  be  distinguished  from  oscillation  because  every  state  in  a 
stutter  cycle  w  ill  only  last  an  instant.  Stutter  often  appears  in  conjunction  with  situations  that  arc  incomplete 
in  os  values.  Rather  titan  find  distinct  stutter  cycles  for  each  r-complction  and  merge  them  later,  we  just 
include  all  the  r-completions  in  the  same  summary  state. 

1  he  following  heuristics  have  been  developed  for  computing  the  summary  of  a  stutter  cycle.  The 
process  and  view  structure  of  die  summary  state  is  taken  to  be  the  union  of  the  view  and  process  structures  for 
the  suites  of  the  cycle.  If  the  dc  value  for  some  quantity  is  the  same  for  all  suites  in  die  cycle,  then  die  o  value 
for  that  quantity  in  the  summary  will  be  that  value.  If  die  os  value  has  a  net  change  in  a  single  direction  (such 
as  being  l  in  some  states  and  o  in  the  rest),  then  the  value  for  the  summary  will  be  the  value  of  the  net  change. 
It  is  less  clear  what  to  do  if  die  value  takes  on  both  -l  and  a  as  values  during  die  cycle.  One  possible 


Fig.  60.  Summarization  algorithm 
Procedure  SUMMARIZE 

1.  Build  a  copy  ENV  of  the  envisionment. 

2.  Merge  all  r-completions 

3.  Find  all  stutter  cycles  in  ENV 

4.  For  each  stutter  cycle  found, 

4.1  Compute  a  situation  which  describes  the  overall 
behavior  during  the  cycle. 

4.2  Replace  the  cycle  with  the  summary  situation. 

5.  Find  and  mark  all  oscillations. 

6.  Find  and  mark  final  states. 


i 
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strategy  is  to  examine  situations  before  and  after  the  cycle  in  order  to  ascertain  the  net  change  in  it  during  die 
cycle.  GIZMO,  however,  simply  marks  the  o$  value  for  die  summary  as  unknown. 

These  rules  arc  viewed  as  heuristics  because  it  is  not  clear  they  will  always  work.  For  instance, 
taking  the  process  structure  of  die  summary  to  be  die  union  of  the  process  structures  for  the  cycle  could  lead 
to  a  situation  diat  normally  would  be  considered  inconsistent.  I  have  not  yet  constructed  such  a 
counterexample,  nor  have  I  been  able  to  prove  diat  such  examples  don’t  exist.  It  also  may  not  matter, 
depending  on  the  kinds  of  questions  die  summary  is  used  to  answer.  Clearly  die  issue  requires  further  study. 


11.3  Examples 
11.3.1  Two  Containers 

This  example  illustrates  die  basics  of  the  envisioning  algorithm.  Figure  16  depicts  the  situation 
graphically,  and  figure  61  shows  the  scenario  specifying  it.  Two  containers,  named  f  and  G,  arc  connected  by 
a  fluid  padi  pi.  The  scenario  specifics  that  initially,  each  container  contains  some  water  in  the  liquid  form  and 
none  in  die  gas  form,  that  the  heights  of  die  bottoms  of  F  and  G  are  at  die  same  height  as  pi,  and  diat  die  level 
of  die  water  in  f  is  greater  than  the  level  of  the  water  in  G.  We  will  also  assume  diat  pi  is  aligned,  and  that  die 
pressure  in  f  initially  is  greater  than  the  pressure  in  G.  Figure  62  plots  die  situations  that  result.  Flcre  is 


Fig.  61.  Two  container  scenario 

(defscenario  two-containers 
( Individual s  F  G  PI 

(c-s  WATER  LIQUID  F) 

(c-s  WATER  LIQUIO  G)) 

(Facts  (Container  F) 

(Container  G) 

(Fluid-Path  Pit 

(Fluid-Connection  PI  (c-s  WATER  LIQUID  F)  (c-S  WATER  LIQUID  G)) 
(Fluid-Connection  PI  (c-s  WATER  LIQUID  G)  (c-s  WATER  LIQUID  F ) ) ) 
(Always  (Equal-To  (A  (max-height  PI))  (A  ((height  bottom)  G))) 

(Equal-To  (A  (max-height  PI))  (A  ((height  bottom)  F))) 

;assume  they  are  on  a  flat  table 

(Equal-To  (A  ((height  bottom)  F ) )  (A  ((height  bottom)  G))) 
(Aligned  PI)) 

(In-Situation  2c-start 

(Individuals  F  G  PI 

(C-S  WATER  LIQUID  F) 

(c-s  WATER  LIQUID  G) ) 

(Facts 

;there  is  water 

(Greater-than  (A  ( amount-of - i n  WATER  LIQUID  F)) 

ZERO) 

(Greater-than  (A  ( anoun t-of- i n  WATER  LIQUID  G)) 

ZERO) 

;No  steam 

(Equal-to  (A  ( anount-of- in  WATER  GAS  F)) 

ZERO) 

(Equal-to  (A  (amount-of-in  WATER  GAS  G)) 

ZERO)))) 


GIZMO'S  description  of  what  occurs:1 

In  situation  SO.  there  is  a  flow  of  the  water  In  F 
to  G.  The  height  of  the  top  of  the  water  in  G,  the  volume 
of  the  water  in  G,  the  pressure  of  the  water  in  G,  the  level 
of  the  water  in  G.  and  the  amount  of  the  water  in  G  are 
increasing.  The  height  of  the  top  of  the  water  in  F.  the 
volume  of  the  water  in  F,  the  pressure  of  the  water  in  F,  the 
level  of  the  water  in  F.  the  flow  rate  of  the  a  flow  of  the 
water  in  F  to  G,  and  the  amount  of  the  water  in  F  are  decreasing. 

All  other  quantities  are  constant. 

After  some  time,  the  pressure  of  the  water  in  F 
and  the  pressure  of  the  water  in  G  become  equal.  This 
leads  to  situation  S3. 

In  situation  S3,  no  processes  are  acting.  The 
pressure  of  the  water  in  F  equals  the  pressure  of  the  water 
in  G.  All  quantities  are  constant. 

No  changes  are  possible. 

Note  that  the  assumptions  have  ruled  out  two  possibilities.  First,  the  reason  that  the  amount  of  water  in  f 
cannot  go  to  zero  is  that  in  so  (a  copy  of  2c-start)  the  pressure  of  the  water  in  f  is  greater  than  the  pressure  of 
the  water  in  g.  while  if  the  water  were  to  vanish,  there  would  be  a  time  in  which  the  pressure  in  f  was  less  than 
the  pressure  in  g  (from  the  correspondences  linking  height  with  level  and  level  with  pressure).  That  cannot 
be,  since  it  must  first  pass  through  equality  (by  continuity),  which  would  make  a  different  hypothesis  true. 


1.  GIZMO  has  a  very  simple  built-in  text  generator. 
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Second,  ii  is  not  possible  for  die  le\el  in  f  to  reach  the  maximum  height  of  pi  (thus  preventing  flow)  because 
the  maximum  height  of  pi  is  the  same  as  the  height  of  die  bottom  of  F.  Thus  GIZMO  concludes  diat  the  only 
change  possible  is  for  die  pressures  to  equalize. 


11.3.2  Simple  Roiling 


This  example  consists  of  a  can  containing  only  liquid  water  sitting  on  a  stove  (sec  Figure  63).  The 
burner  of  the  stove  forms  a  heat  path  between  die  water  in  the  can  and  die  stove  (we  will  ignore  any  effects  of 

healing  the  can  itself).  The  stove  is  modelled  as  a  temperature  source,  meaning  that,  unlike  other  objects,  its 

temperature  is  not  a  function  of  heat  or  amount  of  stuff.  Kxplosions  are  not  modelled  in  diis  vocabulary,  so 
we  wdl  assume  that  the  can  is  closed  to  avoid  any  (lows  of  steam.  Figure  64  illustrates  situations  that  result, 
and  here  is  Gl/.MO's  synopsis  of  diem: 

In  situation  S4,  there  is  a  heat  flow  from  STOVE  to  the 

water  in  CAN.  The  temperature  of  the  water  in  CAN  and  the 

heat  of  the  water  in  CAN  are  increasing.  The  heat  of  STOVE 

and  the  flow  rate  of  the  heat  flow  from  STOVE  to  the  water  in 

Can  are  decreasing.  All  other  quantities  are  constant. 

The  possible  changes  are: 

1  After  some  time,  the  temperature  of  the  water  in  CAN 

rises  to  the  temperature  of  STOVE  and  the  temperature 
of  the  water  in  CAN  rises  to  the  boiling  temperature 

of  the  water  in  CAN.  This  leads  to  situation  S5. 

2  After  some  time,  the  temperature  of  the  water  in  CAN 
rises  to  the  temperature  of  STOVE.  This  leads  to 
situation  S6. 

3  After  some  time,  the  temperature  of  the  water  in  CAN 
rises  to  the  boiling  temperature  of  the  water  in  CAN. 

This  leads  to  situation  S7. 


I  ig.  63.  Roiling  scenario 

(defScenario  Can-on-Stove 
(Individuals  CAN 

(c-s  WATER  LIQUID  CAN) 

(C-S  WATER  GAS  CAN) 

BURNER 

STOVE) 

(Facts  (Container  CAN) 

(Meat-path  BURNER) 

(Heat-Connection  BURNER  STOVE  (c-s  WATER  LIQUID  CAN)) 

( I enperature - Source  STOVE)) 

:  the  ft’iowing  two  facts  follow  as  consequences  of 
; un imp  1 emen ted  touch  relationships 

(Always  (Meat-tcnnection  BURNER  STOVE  (c-s  WATER  GAS  CAN)) 

(Meat-Aligned  BURNER) 

(tqual-to  (A  (temperature  (c-s  WATER  LIQUID  CAN))) 

(A  (temperature  (c-s  WATER  GAS  CAN))))) 

( In-S  ituation  Start 

(Individuals  CAN  BURNER  STOVE  (c-s  WATER  LIQUID  CAN)) 

(Facts  ( Greater - Th an  (A  (amount-of- in  WATER  LIQUID  CAN))  ZERO) 
(Equal-To  (A  ( amount-of- in  WATER  GAS  CAN))  ZERO) 
(tess-Than  (A  (temperature  (c-s  WATER  LIQUID  CAN))) 

(A  (temperature  STOVE)))))) 


In  situation  S5 ,  no  processes  are  acting.  ZERO 
equals  the  amount  of  steam  in  CAN,  ZERO  is  less  than  the 
amount  of  water  in  CAN,  the  bailing  temperature  of  the  water 
in  CAN  equals  the  temperature  of  the  water  in  CAN, 
and  the  temperature  of  STOVE  equals  the  temperature  of  the 
water  in  CAN.  All  quantities  are  constant. 

No  changes  are  possible. 

In  situation  S6,  no  processes  are  acting.  ZERO 
equals  the  amount  of  steam  in  CAN,  ZERO  is  less  than  the 
amount  of  water  in  CAN.  the  boiling  temperature  of  the  water 
in  CAN  is  greater  than  the  temperature  of  the  water  in  CAN, 
and  the  temperature  of  STOVE  equals  the  temperature  of  the 
water  in  CAN.  All  quantities  are  constant. 

No  changes  are  possible. 

In  situation  S7 ,  there  is  a  heat  flow  from  STOVE  to  the 
water  in  CAN.  the  water  in  CAN  is  boiling,  and  a  heat  flow 
fron  STOVE  to  the  steam  in  CAN.  The  pressure  of  the  steam 
m  CAN  and  the  amount  of  the  steam  in  CAN  are  increasing. 

The  height  of  the  top  of  the  water  in  CAN,  the  volume  of  the 
water  in  CAN,  the  oressure  of  the  water  in  CAN,  the  level 
of  the  water  in  CAN.  the  heat  of  STOVE,  and  the  amount  of  the 
water  in  CAN  are  decreasing.  All  other  quantities  are  constant 

After  some  tine,  the  amount  of  water  in  CAN  drops  to  ZERO 
This  leads  to  situation  S8. 

In  situation  S8 ,  there  is  a  heat  flow  from  STOVE  to  the 
steam  in  CAN  The  temperature  of  the  steam  in  CAN,  the 
pressure  of  the  steam  in  CAN,  and  the  heat  of  the  steam  in 
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CAN  are  increasing.  The  heat  of  STOVE  and  the  flow  rate  of 
the  heat  flow  from  STOVE  to  the  steam  in  CAN  are  decreasing. 

All  other  quantities  are  constant. 

After  some  tine,  the  temperature  of  the  steam  in  CAN 
rises  to  the  temperature  of  STOVE.  This  leads  to  situation  S9 . 


In  situation  S9 ,  no  processes  are  acting.  ZERO  is 
less  than  the  amount  of  steam  in  CAN,  ZERO  equals  the 
amount  of  water  in  CAN.  and  the  temperature  of  STOVE 
equals  the  temperature  of  the  steam  in  CAN.  All 
quantities  are  constant. 

No  changes  are  possible. 

Hxamining  the  envisionment  step  by  step,  we  sec  that  GIZMO  deduces  that,  at  first,  only  heat  flow 
between  die  container  and  the  water  occurs.  This  flow  occurs  because  there  is  a  temperature  difference 
between  die  water  and  the  stove.  Since  initially  no  steam  exists,  dien  boiling  cannot  be  happening  since 
boiling  produces  steam.  Hither  die  heat  flow  will  stop  (situations  S5  and  S6).  if  die  temperature  of  the  stove  is 
less  than  or  equal  to  die  boiling  temperature  of  the  water,  or  boiling  will  occur  (situation  S7).  If  boiling  occurs 
then  steam  will  come  into  being.  Since  we  arc  ignoring  flows  out  of  die  container  or  any  indirect  effects  of 
pressure  on  die  boiling  temperature,  die  next  thing  that  happens  is  diat  the  water  vanishes  (situation  S8), 
ending  the  boiling.  The  heat  flow  from  die  stove  to  die  steam  will  continue,  raising  the  steam's  temperature 
until  it  reaches  that  of  die  stove  (situation  S9). 


11.3.3  Three  containers 

So  far,  the  examples  have  exhibited  very  simple  behavior.  Few  alternative  changes  were  possible, 
and  each  change  resulted  in  situations  with  all  ds  values  determined,  l.ct  us  reexamine  die  three  containers 
example  used  to  introduce  die  idea  of  stutter  in  section  5.1.  ’Hie  scenario  describing  the  situation  is  just  the 
scenario  in  section  10.3.  The  situation  plot  is  illustrated  in  figure  65.  The  dashed  lines  indicate  links  between 
a  situation  and  its  r-complctions.  Note  diat  two  stutter  cycles  exist,  corresponding  to  the  prospect  of  one  flow 
stopping  before  the  other.  Figure  66  plots  Gl/.MO’s  summary  of  die  situation.  Notice  that  the  two 
collections  of  stutter  cycles  have  been  merged  into  two  distinct  slates,  making  the  envisionment  much  simpler. 
Mere  is  GI/.MO  s  explanation  of  die  summary: 

The  final  state  is  S3-0. 

The  stutter  cycles  are  summarized  as  S17  and  S16. 

In  situation  S0-0,  there  is  a  flow  of  the  water  in  6  to  F 
and  a  flow  of  the  water  in  G  to  H.  The  height  of  the  top 
of  the  water  in  H,  the  height  of  the  top  of  the  water  In  F, 
the  volume  of  the  water  in  H,  the  volume  of  the  water  in  F, 
the  pressure  of  the  water  in  H,  the  pressure  of  the  water  in  F, 

the  level  of  the  water  in  H,  the  level  of  the  water  in  F,  the 

amount  of  the  water  in  H,  and  the  amount  of  the  water  in 
F  are  increasing.  The  height  of  the  top  of  the  water  in  G, 
the  volume  of  the  water  in  G.  the  pressure  of  the  water  in  G, 
the  level  of  the  water  in  G,  the  flow  rate  of  the  flow  of  the 

water  in  G  to  H,  the  flow  rate  of  the  flow  of  the  water  in  G  to  F, 

and  the  amount  of  the  water  in  G  are  decreasing.  All  other 
quantities  are  constant.  The  possible  changes  are: 

1  After  some  time,  the  pressure  of  the  water  in  G 

equals  the  pressure  of  the  water  in  H  and  the  pressure 
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of  the  water  in  F  equals  the  pressure  of  the  water  in  G. 
This  leads  to  situation  S3-0. 

2  After  some  time,  the  pressure  of  the  water  in  G 

equals  the  pressure  of  the  water  in  H.  This 

leads  to  situation  S16. 

3  After  some  time,  the  pressure  of  the  water  in  F 

equals  the  pressure  of  the  water  in  G.  This 

leads  to  situation  S17. 


In  situation  S3-0,  no  processes  are  acting.  The 
pressure  of  the  water  in  G  equals  the  pressure  of  the  water  in  H. 
the  pressure  of  the  water  in  F  equals  the  pressure  of  the  water 
in  G,  ZERO  equals  the  amount  of  steam  in  H,  ZERO  equals  the 
amount  of  steam  in  G,  and  ZERO  equals  the  amount  of  steam  in  F. 
All  quantities  are  constant. 

No  changes  are  possible. 

In  situation  S16,  there  is  a  flow  of  the  water  in  G  to  F 
and  a  flow  of  the  water  in  H  to  G.  The  pressure  of  the  water 
in  H  starts  just  barely  above  the  pressure  of  the  water  in  G. 

The  amount  of  the  water  in  F,  the  level  of  the  water  in  F. 

the  pressure  of  the  water  in  F.  the  volume  of  the  water  in  F. 
and  the  height  of  the  top  of  the  water  in  F  are  increasing. 

The  amount  of  the  water  in  G,  the  amount  of  the  water  in  H. 
the  flow  rate  of  the  flow  of  the  water  in  G  to  F,  the  level 
of  the  water  in  G,  the  level  of  the  water  in  H,  the  pressure 

of  the  water  in  G,  the  pressure  of  the  water  in  H,  the  volume 

of  the  water  in  G,  the  volume  of  the  water  in  H,  the  height 

of  tne  top  of  the  water  in  G.  and  the  height  of  the  top  of  the 

water  in  H  are  decreasing.  With  one  exception,  the  other 

quantities  aren’t  changing.  The  flow  rate  of  the  flow  of  the 
water  in  H  to  G  might  be  changing. 

After  some  time,  the  pressure  of  the  water  in  G 
equals  the  pressure  of  the  water  in  H  and  the  pressure  of  the 
water  in  F  equals  the  pressure  of  the  water  in  G.  This 
leads  to  situation  S3-0. 

In  situation  S17,  there  is  a  flow  of  the  water  in  F  to  G 
and  a  flow  of  the  water  in  G  to  H.  The  pressure  of  the  water 
in  F  starts  just  barely  above  the  pressure  of  the  water  in  G. 

The  amount  of  the  water  in  H,  the  level  of  the  water  in  H, 

the  pressure  of  the  water  in  H,  the  volume  of  the  water  In  H, 
and  the  height  of  the  top  of  the  water  in  H  are  increasing. 

The  amount  of  the  water  in  F,  the  amount  of  the  water  In  G, 
the  flow  rate  of  the  flow  of  the  water  in  G  to  H,  the  level 
of  the  water  in  F,  the  level  of  the  water  in  G,  the  pressure 

of  the  water  in  F,  the  pressure  of  the  water  in  G,  the  volume 

of  the  water  in  F,  the  volume  of  the  water  in  G,  the  height 

of  the  top  of  the  water  in  F,  and  the  height  of  the  top  of  the 

water  in  G  are  decreasing.  With  one  exception,  the  other 

quantities  aren't  changing.  The  flow  rate  of  the  flow  of  the 
water  in  F  to  G  might  be  changing. 

After  some  time,  the  pressure  of  the  water  in  G 
equals  the  pressure  of  the  water  in  H  and  the  pressure  of  the 
water  in  F  equals  the  pressure  of  the  water  in  G.  This 
leads  to  situation  S3-0. 


Notice  tli.it  wc  do  not  know  how  the  .imount  of  G  is  changing  during  the  dynamic  equilibriums  -  a  closer 
inspection  of  the  original  emisionmcni  would  reveal  that  it  is  cither  constant  or  falling,  but  cannot  be  rising. 
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11.3.4  Four  blobs 


(•.veil  very  simple  situations  can  give  rise  to  complex  stutter,  making  summarization  rules  a  necessity. 
We  will  examine  one  of  those  situations  now  to  see  just  how  well  the  summarization  heuristics  work.  Figure 
67  describes  an  object  G  which  is  surrounded  by,  and  in  heat  contact  w  ith,  objects  F,  h,  and  I.  Initially  we  will 
assume  the  temperature  in  G  is  highest,  which  means  heat  will  flow  out  from  G  to  f,  h,  and  I.  Hie 
envisionment  is  sufficiently  complicated  that  examining  the  situation  plot  would  tell  us  nothing  --  it  consists 
of  86  situations,  linked  by  181  quantity  hypotheses  and  150  r-completion  links. 

Figure  68  shows  a  plot  of  the  envisionment’s  summary.  It  is  still  rather  complicated  (11  suites),  but  it 
is  almost  an  order  of  magnitude  simpler  than  the  original  description.  Here  is  Gl/.MO’s  synopsis  of  it: 

The  final  state  is  S3-0. 

The  stutter  cycles  are  summarized  as  S102,  S101,  S100,  S99, 

S98 .  S97.  S96 ,  S95,  and  S94. 

In  situation  S0-0,  there  is  a  heat  flow  from  G  to  I ,  a  heat  flow 
from  G  to  H,  and  a  heat  flow  from  G  to  F  The  temperature  of  I,  the 
temperature  of  H,  the  temperature  of  F,  the  heat  of  I,  the  heat  of  H, 
and  the  heat  of  F  are  increasing.  The  temperature  of  G.  the  heat  of 
G.  the  flow  rate  of  the  heat  flow  from  G  to  F,  the  flow  rate  of  the 
heat  flow  from  G  to  H,  and  the  flow  rate  of  the  heat  flow  from  G  to  I 
are  decreasing.  All  other  quantities  are  constant. 

The  next  states  can  be  S102,  S101.  S100,  S97,  S96,  S94, 
and  S3-0. 

1  situation  S3-0.  no  processes  are  acting.  The 
temperature  of  G  equals  the  temperature  of  I.  the  temperature 
of  G  equals  the  temperature  of  H,  and  the  temperature  of  F 
equals  the  temperature  of  G.  All  quantities  are  constant. 

No  changes  are  possible. 


Fig.  67.  Four  blobs  scenario 

(defscenario  four-containers 
(Individuals  F  G  H  I  pi  p2  p 3 ) 

(Facts  (Piece-Of-Stuff  F) 

( P iece-Of -S tuf f  G) 

(Piece-Of-Stuff  H) 

(Piece-Of-Stuff  I) 

(Heat-Path  pi) 

(Heat-Path  p2) 

(Heat-Path  p 3 ) 

(Heat-Connection  Pi  F  G)  ;everything  is  connected  through  g 
(Heat-Connection  PI  G  F) 

(Heat-Connection  P2  G  H) 

(Heat-Connection  P2  H  G) 

(Heat-Connection  P3  G  I) 

(Heat-Connection  P3  I  G ) ) 

(Always  ( Heat-Al igned  PI) 

( lleat-Al  igned  P2) 

(Heat-Aligned  P3)) 

(In-Situation  4C-START 

(Individuals  F  G  H  I  PI  P2  P3))) 


.  68.  Plot  of  four  blob  summary 


In  situation  S94,  there  is  a  heat  flow  from  G  to  H.  a  heat  flow 
frcm  G  to  F ,  and  a  heat  flow  from  I  to  G.  The  temperature  of  I  Is 
just  barely  above  the  temperature  of  G.  The  heat  of  F,  the  heat  of  H, 
the  temperature  of  F,  ana  the  temperature  of  H  are  increasing.  The 
flow  rate  of  the  heat  flow  from  G  to  H.  the  flow  rate  of  the  heat  flow 
from  G  to  F ,  the  heat  of  G,  the  heat  of  I,  the  temperature  of  G.  and 
trie  temperature  of  I  are  decreasing.  With  one  exception,  the  other 
quantities  aren't  changing.  The  flow  rate  of  the  heat  flow  from  I  to 
G  might  be  changing. 

The  next  states  can  be  S100,  S98,  S96,  S95,  and  S3-0. 

In  situation  S95.  there  is  a  heat  flow  from  G  to  F,  a  heat  flow 
from  H  to  G.  and  a  heat  flow  from  I  to  G.  The  temperature  of  I  is 

just  barely  above  the  temperature  of  G  and  the  temperature  of  H  is 

just  barely  above  the  temperature  of  G.  The  heat  of  F  and  the 
temperature  of  F  are  increasing.  The  heat  of  H,  the  heat  of  I.  the 
temperature  of  H,  and  the  temperature  of  I  are  decreasing.  With  some 
exceptions,  the  other  quantities  aren’t  changing.  The  flow  rate  of 
the  neat  flow  from  I  to  G.  the  temperature  of  G.  the  heat  of  G.  the 
flow  rate  of  the  heat  flow  from  h  to  G.  and  the  flow  rate  of  the  heat 
flow  from  G  to  F  might  be  changing. 

The  next  states  can  be  S96  and  S3-0. 

In  situation  S96 .  there  is  a  heat  flow  from  G  to  F,  a  heat  flow 
fron  H  to  G,  and  a  heat  flow  from  I  to  G.  The  temperature  of  I  is 

just  barely  above  the  temperature  of  G  and  the  temperature  of  H  is 

just  bare'y  above  the  temperature  of  G.  The  heat  of  F  and  the 
tenopr ature  of  F  are  increasing.  The  flow  rate  of  the  heat  flow  from 
G  to  f .  the  heat  of  G,  the  heat  of  H,  the  heat  of  I,  the  temperature 
of  G.  the  temoerature  of  H,  and  the  tenoerature  of  I  are  decreasing. 
With  some  exceptions,  the  other  quantities  aren't  changing.  The  flow 
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rate  of  the  heat  flow  fron  I  to  G  and  the  flow  rate  of  the  heat  flow 
fron  H  to  G  might  be  changing. 

The  next  state  is  S3-0. 

In  situation  S97,  there  is  a  heat  flow  from  G  to  I .  a  heat  flow 
from  G  to  F ,  and  a  heat  flow  from  H  to  G.  The  temperature  of  H  is 
just  barely  above  the  temperature  of  G.  The  heat  of  F,  the  heat  of  I, 
the  temperature  of  f ,  and  the  temperature  of  I  are  increasing.  The 
flow  rate  of  the  heat  flow  from  G  to  I,  the  flow  rate  of  the  heat  flow 
from  G  to  F,  the  heat  of  G,  the  heat  of  H.  the  temperature  of  G,  and 
the  temperature  of  H  are  decreasing.  With  one  exception,  the  other 
quantities  aren’t  changing.  The  flow  rate  of  the  heat  flow  from  H  to 
G  might  be  changing . 

The  next  states  can  be  S1G1,  S99,  S3-0,  S96,  and  S95. 

In  situation  S98,  there  is  a  heat  flow  from  F  to  G,  a  heat  flow 
from  G  to  H,  and  a  heat  flow  from  I  to  G.  The  temperature  of  I  is 

just  barely  above  the  temperature  of  G  and  the  temperature  of  F  is 

just  barely  above  the  temperature  of  G.  The  heat  of  H  and  the 
temperature  of  H  are  increasing.  The  heat  of  F,  the  heat  of  I,  the 
temperature  of  F,  and  the  temperature  of  I  are  decreasing.  With  some 
exceptions,  the  other  quantities  aren't  changing.  The  flow  rate  of 
the  heat  flow  from  I  to  G,  the  temperature  of  G.  the  heat  of  G,  the 

flow  rate  of  the  heat  flow  from  G  to  H,  and  the  flow  rate  of  the  heat 

flow  from  F  to  G  might  be  changing. 

The  next  states  can  be  S100  and  S3-0. 

In  situation  S99,  there  is  a  heat  flow  from  F  to  G,  a  heat  flow 
from  G  to  I,  and  a  heat  flow  from  H  to  6.  The  temperature  of  H  is 

just  barely  above  the  temperature  of  G  and  the  temperature  of  F  Is 

just  barely  above  the  temperature  of  G.  The  heat  of  I  and  the 
temperature  of  I  are  increasing.  The  heat  of  F,  the  heat  of  H,  the 
temperature  of  F,  and  the  temperature  of  H  are  decreasing.  With  some 
exceptions,  the  other  quantities  aren't  changing.  The  flow  rate  of 
the  heat  flow  from  H  to  G,  the  temperature  of  G,  the  heat  of  G,  the 

flow  rate  of  the  heat  flow  from  G  to  I.  and  the  flow  rate  of  the  heat 

flow  from  F  to  G  might  be  changing. 

The  next  states  can  be  S101  and  S3-0. 

In  situation  S100,  there  is  a  heat  flow  from  F  to  G,  a  heat  flow 
from  G  to  H,  and  a  heat  flow  from  I  to  G.  The  temperature  of  I  is 

just  barely  above  the  temperature  of  G  and  the  temperature  of  F  is 

just  barely  above  the  temperature  of  G.  The  heat  of  H  and  the 
temperature  of  H  are  increasing.  The  flow  rate  of  the  heat  flow  from 
G  to  H.  the  heat  of  F,  the  heat  of  G,  the  heat  of  I,  the  temperature 
of  F,  the  temperature  of  G,  and  the  temperature  of  I  are  decreasing. 
With  some  exceptions,  the  other  quantities  aren't  changing.  The  flow 
rate  of  the  heat  flow  from  I  tc  G  and  the  flow  rate  of  the  heat  flow 
from  F  to  G  might  be  changing, 

The  next  state  is  S3-0. 

In  situation  S 1 0 1 .  there  is  a  heat  flow  from  F  to  G,  a  heat  flow 
from  G  to  I ,  and  a  heat  flow  from  H  to  G.  The  temperature  of  H  is 

just  barely  above  the  temperature  of  G  and  the  temperature  of  F  is 

just  barely  above  the  temperature  of  G.  The  heat  of  I  and  the 
temperature  of  I  are  increasing.  The  flow  rate  of  the  heat  flow  from 
G  to  I,  the  heat  of  F,  the  heat  of  G,  the  heat  of  H.  the  temperature 
of  F,  the  temperature  of  G,  and  the  temperature  of  H  are  decreasing. 
With  some  exceptions,  the  other  quantities  aren’t  changing.  The  flow 
rate  of  the  heat  flow  from  H  to  G  and  the  flow  rate  of  the  heat  flow 
from  F  to  G  might  be  changing. 

The  next  state  is  S3-0. 

In  situation  S 1 0 2 .  there  is  a  heat  flow  from  F  to  G,  a  heat  flow 
from  G  to  I ,  and  a  heat  flow  from  G  to  H.  The  temperature  of  F  is 
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just  barely  above  the  temperature  of  G.  The  heat  of  H,  the  heat  of  I, 
the  temperature  of  H,  and  the  temperature  of  I  are  increasing.  The 
flow  rate  of  the  heat  flow  from  G  to  I.  the  flow  rate  of  the  heat  flow 
from  G  to  H.  the  heat  of  F,  the  heat  of  G,  the  temperature  of  F,  and 
the  temperature  of  G  are  decreasing.  With  one  exception,  the  other 
quantities  aren't  changing.  The  flow  rate  of  the  heat  flow  from  F  to 
G  might  be  changing. 

The  next  states  can  be  S3-0,  S 1 0 0 ,  S101,  S9S,  and  S99. 

Despite  the  complexity,  the  results  look  somewhat  reasonable.  Importantly,  every  state  has  a 
consistent  process  structure  --  the  ailcs  may  someday  fail,  but  they  have  survived  this  example. 

11.3.5  Sliding  block 

l.ct  us  turn  to  an  example  involving  motion.  Figure  69  describes  a  block  connected  to  a  spring. 

Figure  70  shows  the  situation  plot,  and  here  is  Gl/MO’s  synopsis  of  it: 

In  situation  S14,  SPR  is  stretched.  There  is  B 
accelerating  to  the  left.  The  velocity  of  B  is  decreasing. 

All  other  quantities  are  constant. 

Instantly,  the  velocity  of  B  drops  below  ZERO.  This 
leads  to  situation  S15. 


In  situation  S15,  SPR  is  stretched.  There  is  B  moving 
to  the  left  and  B  accelerating  to  the  left.  The  force  of  SPR, 
the  force  of  B,  and  the  acceleration  of  B  are  increasing. 

The  velocity  of  B,  the  position  of  B,  and  the  length  of 
SPR  are  decreasing.  All  other  quantities  are  constant. 

After  some  time,  the  length  of  SPR  drops  to  the  rest 
length  of  SPR  and  the  force  of  B  rises  to  ZERO.  This 
leads  to  situation  S16. 


In  situation  S16,  SPR  is  relaxed.  There  is  B  moving 
to  the  left.  The  force  of  SPR  and  the  force  of  B  are  increasing. 

The  position  of  B  and  the  length  of  SPR  are  decreasing. 

All  other  quantities  are  constant. 

Instantly,  the  length  of  SPR  drops  below  the  rest 
length  of  SPR  and  the  force  of  B  rises  above  ZERO.  This 
leads  to  situation  S17. 


Fig.  69.  Sliding  block  scenario 

(defScenario  Kludge-oscillator 
( Individual s  B 

SPR) 

(Facts  (Block  8) 

(Spring  SPR)) 

(Always  ( Connected- To-Spr ing  B  SPR)) 

(In-Situation  TO 

(Individuals  B  SPR) 

(Facts  ;some  initial  conditions 
(Equal-To  (A  (velocity  B))  ZERO) 
(Greater-Than  (A  (Position  8))  ZERO)))) 


In  situation  S17.  SPR  is  compressed.  There  is  B 
moving  to  the  left  and  8  accelerating  to  the  right.  The 
velocity  of  B.  the  force  of  SPR.  the  force  of  B.  and  the 
acceleration  of  B  are  increasing.  The  position  of  B  and  the 
length  of  SPR  are  decreasing.  All  other  quantities  are  constant 

After  some  time,  the  velocity  of  B  rises  to  ZERO.  This 
leads  to  situation  S18. 


In  situation  SIB,  SPR  is  compressed.  There 
is  B  accelerating  to  the  right.  The  velocity  of  B  is  increasing 
All  other  quantities  are  constant. 

Instantly,  the  velocity  of  B  rises  above  ZERO.  This 
leads  to  situation  S19. 


In  situation  S19,  SPR  is  compressed.  There 
is  B  accelerating  to  the  right  and  B  moving  to  the  right. 
The  velocity  of  8,  the  position  of  B,  and  the  length  of 
SPR  are  increasing.  The  force  of  SPR.  the  force  of  B, 
and  the  acceleration  of  8  are  decreasing.  All  other 
quantities  are  constant. 

After  some  time,  the  length  of  SPR  rises  to  the  rest 
length  of  SPR  and  the  force  of  B  drops  to  ZERO.  This 
leads  to  situation  SZO. 


In  situation  SZO,  SPR  is  relaxed.  There  is  B  moving 
to  the  right.  The  position  of  B  and  the  length  of 
SPR  are  increasing.  The  force  of  SPR  and  the  force  of 
B  are  decreasing.  All  other  Quantities  are  constant. 

Instantly,  the  length  of  SPR  rises  above  the  rest 
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length  of  SPR  and  the  force  of  8  drops  below  ZERO.  This 
leads  to  situation  S21. 


In  situation  S21.  SPR  is  stretched.  There  is  B 
accelerating  to  the  left  and  8  moving  to  the  right.  The 
position  of  B  and  the  length  of  SPR  are  increasing.  The 
velocity  of  8,  the  force  of  SPR.  the  force  of  B,  and  the 
acceleration  of  8  are  decreasing.  All  other  quantities  are 
constant. 

After  some  time,  the  velocity  of  B  drops  to  ZERO.  This 
leads  to  situation  S14. 

Since  this  cycle  includes  situations  which  last  over  an  interval,  this  cycle  is  a  true  oscillation  rather  than  stutter, 
as  G  l/MO  points  out  below: 

There  is  no  discernable  final  state. 

The  states  S14.  S15,  S16.  S17,  S18,  S19,  S20, 
and  S21  comprise  an  oscillation. 


i 


l 


» 
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12.  Discussion 

I'his  report  has  described  Qualitative  Process  theory,  which  attempts  to  capture  common  sense 
reasoning  about  dynamics.  Here  we  summarize  the  important  ideas  and  discuss  how  they  might  be  evaluated. 
Then  the  future  directions  suggested  by  this  work  arc  explored,  followed  by  an  examination  of  past  and 
current  work  in  this  area. 


12.1  Summary 

i  Our  common  sense  theories  about  how  tilings  change  in  die  physical  world  have 
a  particular  character.  Physical  processes  arc  the  mechanisms  by  which  change 
occurs.  Reasoning  about  processes  --  their  effects  and  limits  -  form  an  important 
part  of  our  common  sense  physical  reasoning. 

I  Numerical  values  can  be  usefully  represented  by  the  quantity  space,  which 
describes  the  value  of  a  number  in  terms  of  a  partial  order.  The  quantity  space  is 
the  appropriate  representation  because  processes  usually  start  and  stop  when  order 
relationships  between  particular  quantities  change. 

I  QP  theory  provides  the  means  to  draw  several  types  of  basic  qualitative 
deductions,  including  describing  what  is  happening  in  a  physical  situation  (finding 
view  and  process  structures),  reasoning  about  die  combined  effects  of  several 
processes  (resolving  influences),  and  predicting  when  processes  will  start  and  stop 
(limit  analysis).  These  basic  deductions  can  be  woven  together  to  perform  more 
complex  inferential  tasks,  such  as  envisioning  and  measurement  interpretation. 

i  QP  theory  can  be  used  to  model  several  interesting  physical  phenomena  for 
common  sense  reasoning,  including  flows,  state  changes,  motion,  materials,  energy, 
changing  equilibria,  and  oscillation. 

I  QP  theory  provides  a  highly  constrained  account  of  physical  causality  (all 
changes  arc  due  to  a  finite  vocabulary  of  processes)  and  a  useful  notation  for 
expressing  causal  connections  between  quantities  («q). 

i  QP  dicory  provides  a  structured  role  for  die  use  of  experiential  and  default 
knowledge  in  physical  reasoning  --  for  example,  in  resolving  influences  and 
choosing  or  ruling  out  alternatives  in  limit  analysis. 

I  QP  dicory  partially  specifics  a  language  for  writing  qualitative  dynamical 
theories.  In  particular,  the  primitives  arc  simple  processes  and  individual  views, 
the  means  of  combination  are  sequentiality  and  shared  parameters,  and  the  means 
of  abstraction  arc  naming  these  combinations,  including  encapsulating  a  piece  of  a 
history. 
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1 2.2  !  las  the  thesis  been  proven? 

There  are  two  ways  to  judge  QP  theory.  The  first  way  is  as  a  prescription  for  a  representation 
language  for  programs  which  must  reason  about  the  physical  world.  The  second  way  is  as  a  psychological 
theory  about  the  structure  of  people’s  common  sense  theories  of  dynamics.  Since  both  considerations 
motivated  the  development  of  the  theory,  let  us  examine  each  in  turn. 

A  representation  language  for  qualitative  physics  should  be  judged  by  the  range  of  phenomena  it 
can  he  used  to  model,  the  deductions  it  sanctions,  and  how  perspicuous  its  descriptions  arc.  There  arc 
additional  criteria  concerning  the  esthetic  of  particular  models  written  in  the  language  (sec  [de  Klccr  and 
Brown,  1983]).  but  we  will  discuss  these  later. 

To  understand  the  range  of  phenomena  QP  theory  can  describe,  let  us  consider  what  kinds  of 
differential  equations  can  be  represented.  First,  we  will  restrict  derivatives  to  be  taken  with  respect  to  time. 
Next,  note  that  derivatives  in  the  equation  (c.g.,  dx/dt)  can  be  represented  by  introducing  explicit  quantities 
which  are  the  derivative  and  making  the  original  quantity  be  directly  influenced  by  die  derivative  (c.g.,  let  v  - 
dx/dt,  and  i+(x,  v)).  If  the  derivative  of  some  quantitiy  is  equal  to  a  sum,  each  term  of  the  sum  can  be 
represented  by  additional  direct  influences.  Finally,  note  Uiat  qualitative  proportionalities  can  be  used  to 
represent  combinations  other  than  addition  (e.g.,  dx/dt  ■  f  (y ,  z)  becomes  v  °Cq+  y  a  v  oc^+  2).  As  mentioned 
previously,  functions  which  arc  non-monotonic  must  be  modelled  by  breaking  them  up  into  monotonic 
segments,  using  an  individual  view  to  limit  the  scope  of  applicability  for  each  ocQ.  By  constructing  the 
appropriate  process  and  view  vocabularies,  any  differential  equation  (with  respect  to  time)  can  be 
represented.  Since  differential  equations  are  the  language  of  choice  for  "real”  physics,  this  suggests  the 
potential  scope  ofQP  theory  is  quite  broad. 

A  more  precise  determination  of  the  scope  of  the  theory,  however,  rests  on  two  additional  factors. 
First,  in  "real"  physics  the  knowledge  of  when  the  equations  arc  appropriate  isn't  part  of  die  formal  theory. 
The  information  made  explicit  in  QF  theory's  individual  specifications,  preconditions,  and  quantity 
conditions  is  usually  specified  informally.  It  might  be  the  case  that  QF  theory  is  inadequate  for  specifying 
these  criteria.  Second,  it  is  possible  that  such  criteria  may  always  be  specified  in  it,  but  in  some  cases  only 
with  great  difficulty  (much  as  it  is  theoretically  possible  to  write  an  operating  system  in  luring  machine  code, 
but  is  hardly  something  one  would  attempt  in  practice).  The  examples  presented  previously  suggest  the 
descriptive  language  of  QF  theory  is  both  adequate  and  natural,  but  the  question  will  only  be  settled  by 
undertaking  the  construction  of  many  domain  models.  Evaluating  the  usefulness  and  naturalness  of  the 
deductions  it  sanctions  provides  a  similar  problem;  whether  or  not  die  basic  deductions  it  provides  can  be 
composed  to  implement  all  the  kinds  of  dynamical  reasoning  desired  is  an  empirical  matter,  since  we  do  not 
already  have  a  full  understanding  of  the  class  of  deductions  which  comprise  common  sense  physics.  While 
the  envisioning  and  measurement  interpretation  algorithms  illustrate  its  promise,  only  by  exploring  additional 
styles  of  reasoning  will  its  adequacy  be  demonstrated.  Particular  suggestions  are  made  in  section  12.3.3  below. 

I  o  be  a  good  psychological  account.  QF  theory  must  explain  observed  psychological  phenomena, 
such  as  characteristic  inferences,  errors,  and  learning  patterns.  QF  theory  should  also  lead  to  falsifiable 
predictions.  Making  such  predictions  is  complicated  because  people  appear  to  have  several  different  kinds  of 
models  for  the  physical  world.  Their  models  can  vary  widely  in  scope  and  completeness,  and  often  contain 
inconsistencies.  While  the  overall  structure  of  people’s  knowledge  about  the  physical  world  is  not  yet  known, 
there  arc  indications  that  people  s  models  include  descriptions  of  prototypical  behaviors,  which  we  call 


prvtohistories (see  [l-'oibus  &  Gcntncr.  198.1]  for  details).  Protohislorics  arc  (abstracted)  memories  of  observed 
events;  hence  questions  about  behavior  in  familiar  domains  may  be  answered  by  referring  to  them  rather  than 
an  explicit  naive  physics.  Determining  the  extent  to  which  protohistories  verses  an  explicit  naive  physics  is 
used  in  reasoning  about  the  physical  world  is  still  an  open  empirical  question. 

There  arc  features  of  QP  theory  which  may  lead  to  testable  predictions.  First.  QP  theory 
distinguishes  between  independent  quantities  (i.c..  those  which  can  be  directly  influenced)  and  dependent 
quantities  (i.c.,  those  which  cannot).  If  a  subject  docs  not  honor  this  distinction  in  making  some  deduction, 
then  QP  theory  is  not  being  used  to  draw  it.  QP  theory  is  die  only  qualitative  physics  that  makes  this 
prediction,  so  if  the  distinction  is  honored  then  this  provides  support  for  QP  theory.  Second,  QP  theory 
suggests  llt.it  .in  explicit  notion  of  physical  process  is  used  in  human  thinking  about  the  physical  world.  One 
way  to  test  this  is  to  look  at  protocols  to  sec  if  processes  are  mentioned  (although  some  effort  is  needed  to 
distinguish  actual  deductiv  e  work  from  mere  figures  of  speech).  Another  way  is  to  make  people  extrapolate 
behavior  in  an  unfamiliar  domain,  testing  to  sec  whether  the  representations  they  acquire  include  processes 
and  w  hether  these  processes  can  be  specified  within  QP  theory. 

One  specific  prediction  is  that  stutter  phenomena  will  occur  in  human  reasoning  This  kind  of 
"mythical  oscillation"  which  represents  changing  equilibriums  violates  the  classical  model  of  continuity;  we 
cannot  account  for  people  generating  behavioral  descriptions  which  include  stutter  by  classical  physics,  nor 
even  the  other  qualitative  physics  which  have  been  developed  (as  we  will  sec  below).  Observing  this 
phenomena,  however,  won’t  necessarily  be  easy.  If  protohistorics  arc  used  to  generate  the  behavioral 
description,  for  instance,  then  stutter  -•  being  unobservable  --  will  not  appear.  If  no  evidence  of  stutter  is 
found,  then  it  suggests  that  case  2  of  die  equality  change  law-  is  not  psychologically  realistic. 

Sti  far,  the  only  psychological  experiments  which  have  been  performed  arc  pilot  studies  aimed  at 
understanding  how  physical  domains  arc  learned.1  Preliminary  indications  arc  that  the  distinction  between 
dependent  and  independent  parameters  is  honored.  When  asked  about  how  one  parameter  will  change  when 
another  changes,  subjects  knowlcdgablc  in  a  domain  balk  --  even  to  die  extent  of  refusing  to  answer  --  if  the 
parameter  to  be  changed  is  a  dependent  one.  I  .css  knowlcdgablc  subjects  appear  to  be  less  fastidious;  they 
will  answer  questions  (often  incorrectly)  no  matter  what  quantities  arc  involved.  Clearly  much  more  work 
w  ill  be  needed  to  adequately  test  die  psychological  relevance  of  QP  theory. 


12.3  Future  work 

There  arc  several  directions  suggested  by  this  work,  both  extensions  and  applications.  Let  us 
examine  them  now. 


1.  These  experiments  arc  being  designed  and  carried  out  by  Dcdrc  Gcntncr  at  HUN  and  Lance  Rips  at 
University  ofChigago,  as  part  of  a  study  funded  by  Schlumbcrger-Doli  Research  Center. 
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12.3.1  Implementation 

As  written.  GIZMO  is  simply  too  slow.  Generating  an  envisionment  with  12  states  takes  over  an 
hour  and  45  minutes,  with  die  time  increasing  non-lincarly  with  the  number  of  states  due  to  increased  paging. 
This  limits  the  complexity  of  the  domain  models  and  scenarios  dial  can  be  explored.  Applying  QP  theory  to 
practical  problems,  of  course,  will  require  much  better  performance. 

There  is  nothing  inherently  inefficient  in  reasoning  with  QP  theory,  indeed  the  present  inefficiency 
is  unsurprising  given  the  exploratory  nature  of  the  program.  But  die  ideas  arc  now  stable,  and  it  is  time  to 
look  into  better  implementation  strategics.  For  instance,  [dc  Klccr.  1984]  describes  a  new  variety  of  TMS 
(used  in  de  Klecr's  IN  VISION  program)  which  should  prove  useful.  In  addition  to  recording  justifications, 
as  most  truth  inaintence  systems  do.  dc  Klecr's  TMS  also  records  die  various  sets  of  assumptions  which 
support  a  fact.  This  means  that  generating  alternate  states  in  measurement  interpretation  and  envisioning  can 
be  performed  "all  at  once",  using  a  separate  processing  step  to  gather  together  collections  of  assumptions 
which  correspond  to  consistent  stales.  Judging  from  observed  run-times  of  his  system,  it  would  appear  diat 
two  orders  of  magnitude  performance  improvement  is  not  out  of  the  questions.  There  is  some  chance  diat  the 
speed-up  would  be  even  greater,  since  his  system  is  currently  running  on  a  slower  LM-2.1 

Such  estimates  should  be  viewed  with  caution,  since  QP  theory  takes  on  more  modelling  work  than 
dcKlccr's  HNVISION.  However,  the  pre-computation  of  possible  individuals  performed  in  situation 
elaboration  (section  9.1)  might  provide  a  simple  way  to  use  dcKlccr's  TMS  directly.  Providing  easy 
interaction  between  die  QP  module  and  external  theories  is  also  something  that  will  require  re-thinking  in  diis 
new  implementation. 


12.3.2  Domain  models 

Developing  qualitative  models  of  the  physical  world  around  us  is  an  intellectually  demanding  task; 
while  QP  theory  makes  this  task  easier,  it  still  is  not  trivial.  The  particular  domain  models  described  in  this 
thesis  reflect  more  on  the  limited  time  available  for  development  dian  on  what  is  possible  using  QP  theory. 

There  arc  several  dimensions  along  which  die  present  model  of  fluids  can  be  improved,  f  irst,  some 
theory  of  solids  and  the  phase  transitions  involving  them  is  needed.  Second,  die  individuating  criteria  for 
fluids  also  needs  to  be  more  sophisticated,  to  model  more  complex  types  of  mixtures  (suspensions  and 
solutions,  for  instance)  and  more  varied  mixture  geometries  (such  as  liquids  which  don't  mix  and  bubbles). 
Third,  die  "kinematics”  of  fluids,  die  dicory  of  fluid  paths  and  heat  paths,  needs  to  be  extended  to  cover  real 
piping  systems,  flows  caused  by  mixing,  and  flows  dirough  free  space,  f  inally,  the  molecular  collection 
ontology,  which  describes  fluids  in  terms  of  "little  pieces  of  stuff’  dial  are  imagined  to  cohere  as  they  pass 
through  a  system,  must  be  better  developed  and  integrated  widi  die  contained  fluid  ontology. 

The  interaction  between  die  contained  fluid  and  molecular  collection  ontologies  hears  remarking. 
There  are  certain  questions  which  can  only  be  asked  in  the  context  of  the  molecular  collection  ontology,  such 
as  "What  happens  to  the  water  fed  into  the  boiler?"  Other  questions  require  using  the  molecular  collection 


1.  GIZMO  ran  over  five  times  faster  when  transported  from  an  l.M-2  to  a  Symbolics  3600. 
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ontology  to  generate  an  answer.  Here  is  one  such  question:  "Suppose  the  boiler's  feedwater  temperature 
increases.  What  happens  to  the  temperature  of  die  steam  at  die  superheater  outlet?"  (see  figure  71).  Die 
answer  runs  something  like  this: 

The  increased  feedwater  temperature  means  less  heat  will  be  required  to  make  it  boil,  hence  the 
rate  of  steam  generation  will  increase.  Tins  means  it  will  be  flowing  through  the  superheater  faster 
(assuming  the  load  sinks  it  all),  and  since  it  remains  in  the  superheater  for  a  shorter  time  the  amount 
of  heat  transferred  will  be  less.  Thus  ihe  temperature  at  the  superheater  outlet  will  decrease.1 
There  are  several  interesting  features  of  tins  description.  First,  the  contained  fluid  ontology  is  clearly 
insufficient,  since  in  it  we  cannot  talk  about  stuff  remaining  in  the  superheater  for  less  time,  only  "the  steam 
in  the  superheater".  Second,  time  and  rate  differences  are  explicitly  mentioned,  suggesting  that  differential 
qualitative  analysis  (see  section  5.4)  is  being  used.  Finally,  notice  that  die  contained  tluid  ontology  is  still 
required  to  deduce  the  overall  structure  of  w  hat  is  happening  in  die  system  -•  that  heat  is  (lowing  to  the  water 
in  the  boiler  (part  of  which  is  die  now-  hotter  feedwater)  and  that  steam  will  flow  from  the  boiler  into  the 
superheater  and  out  to  the  load.  Drawing  these  conclusions  from  an  arbitrary  piece  of  stuff  seems  well  nigh 
impossible,  since  they  depend  on  the  properties  of  all  of  the  stuff  in  a  place  and  what  that  stuff  is  connected 
to.2 

These  considerations  lead  to  an  interesting  conjecture  about  the  relationship  between  the  two  fluid 
ontologies.  In  reasoning  about  a  fluid  system,  it  seems  the  containcd-fluid  ontology  is  constructed  by  default 


Fig.  71.  A  Boiler  Problem 


Steam 


1.  This  question  is  among  the  most  difficult  asked  of  trainees  in  die  Navy  Surface  Warfare  Officer's  School 
propulsion  engineering  course. 

2.  At  least,  neither  I  nor  anyone  else  to  my  knowledge  has  succeeded  in  doing  so.  despite  much  effort. 
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and  used  to  establish  what  is  happening  in  the  situation  (i.c.,  die  proecss  sirueture).  If  the  question  requires 
using  the  molecular  collection  ontology,  the  history  for  a  piece  of  stuff  is  created  by  transformations  operating 
on  the  contained  fluid  description,  for  example,  if  a  piece  of  stuff  is  initially  in  a  particular  place  and  there  is 
.1  flow  out  of  th.it  place,  a  motion  episode  is  constructed  to  represent  the  fact  that  eventually  those  particular 
molecules  will  be  found  in  the  destination  of  that  flow.  If  a  boiling  is  occuring  to  the  contained-liquid  die 
collection  is  a  part  of.  then  a  state-change  episode  w  ill  be  added  to  its  history,  and  so  on.  The  questions  about 
the  molecular  collection  can  then  be  answered  using  this  history,  either  by  accumulating  properties  along  die 
history  (such  as  temperature  changes)  or  by  performing  differential  qualitative  analysis.  Investigation  into 
exactly  what  kinds  of  questions  require  die  molecular  collection  ontology  is  proceeding,  and  computational 
experiments  arc  planned. 

t  he  models  of  motion  presented  could  also  stand  substantial  improv  ement.  The  present  model  is 
impoverished  due  to  a  daw  in  the  implementation;  until  recently,  diere  was  no  way  for  GIZMO  to  know  diat 
certain  domain-dependent  sets  had  to  be  updated  as  it  went  -  in  diis  case,  the  set  of  forces  on  an  object.  This 
limitation  hits  heen  fixed,  and  a  better  motion  model  is  under  development.  Moving  to  more  dian  one 
dimension,  however,  will  lead  to  a  new  set  of  problems.  In  some  cases  (particularly  mechanisms)  it  should  be 
possible  to  break  a  multi-dimensional  motion  up  into  one-dimensional  pieces  which,  when  combined,  yield 
the  actual  motion  of  the  object.1  As  remarked  in  section  4.3,  the  most  useful  general  stratagy  might  be  to  use 
the  qualitative  state  representation  of  motion  (sec  section  4.3.2)  to  generate  descriptions  of  possible  motion, 
and  use  <31'  theory  to  provide  further  analyses.  But  diese  are  empirical  quesdons. 

Other  domains  should  be  explored  as  well.  The  most  tempting  domain  is  electricity,  since  it  also 
minimizes  kinematic  information.  Another  interesting  feature  is  dint  electronics  is  precisely  where  a 
device-centered  ontology  works  best,  because  the  high  intcrconncctivity  makes  finding  explict  flow  paths 
computationally  intractiblc  for  circuits  of  moderate  complexity.  By  contrasting  device-centered  models  with 
process-centered  models,  we  should  be  able  to  sharpen  our  criteria  about  when  each  is  appropriate.2 

12.3.3  Styles 

41i is  report  explored  two  styles  of  reasoning,  envisioning  (as  a  means  of  prediction)  and 
measurement  interpretation,  llicrc  arc  several  other  styles  to  explore  as  well.  Here  we  will  discuss  extensions 
to  measurement  interpretation  and  prediction,  and  issues  which  arise  in  planning  and  design. 


1.  According  to  [Rculeaux.  1875]  the  ability  to  use  such  decompositions  is  a  central  constraint  on  die 
well-designed  mechanism.  Many  mechanisms,  however,  do  not  have  diis  property. 

2.  In  |l  orbus  Gcntncr.  1984],  it  is  conjectured  that  people's  early  models  of  electricity  are 
process-centered,  and  as  more  complex  circuits  are  studied  a  device-centered  model  is  generated.  T.xploring 
this  ontological  shift  might  improve  our  understanding  of  how  people  use  both  types  of  models. 
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12.3.3.1  Measurement  interpretation 

The  theory  presented  here  for  interpreting  measurements  appears  adequate  for  its  intended  purpose, 
although  die  pruning  heuristics  must  still  be  tested  empirically.  It  also  appears  Ui.it  die  dicory  for  die  "one 
look"  case  can  be  extended  to  interpret  measurements  taken  across  time.  An  interpretation  would  be 
generalized  to  a  history,  and  measurements  would  correspond  to  partial  information  about  this  history,  lhe 
description  of  measurements  remains  unchanged,  the  only  difference  being  that  differential  disti nguishability 
will  be  used  over  intervals  of  significant  duration.  There  is  an  additional  problem  of  segmentation,  finding 
intervals  where  the  process  structure  does  not  change.  A  heuristic  is  to  use  changes  in  d$  values  as  a  minimal 
set  of  boundaries,  since  these  must  correspond  to  changes  in  die  resolving  of  influences.  Additional  divisions 
may  be  necessary,  because  changes  in  unobserved  quantities  may  take  time  to  propagate  to  distinguishable 
changes  in  observed  quantities  --  for  example,  a  stove  may  be  on  for  some  time  before  you  deduce  diat  fact  by 
seeing  steam  pour  out  of  a  kettle  on  top  of  it. 

T  he  "one  look"  algorithm  could  be  used  to  build  interpretations  for  what  is  occuring  during  each 
episode  implied  by  the  boundaries,  flic  pruning  constraints  and  heuristics  described  above  still  hold  --  even 
if  we  watch  for  live  minutes,  evaporation  still  won’t  empty  a  drinking  glass.  Because  die  episodes  are 
connected,  the  interpretation  for  any  particular  episode  has  to  be  consistent  with  the  interpretations  for  die 
ones  around  it.  In  particular,  the  interpretation  for  each  episode  has  to  correspond  to  a  process  structure 
implied  by  some  limit  hypothesis  for  die  process  structure  implied  by  the  interpretation  of  the  episode  before 
it.  Ibis  constraint  also  suggests  an  alternate  strategy  -  use  the  "one  look"  algorithm  to  develop  an 
interpretation  for  the  earliest  set  of  measurements,  then  use  limit  analysis  to  construct  the  situations  that  could 
come  next.  If  any  of  diose  situations  are  legitimate  interpretations  for  the  next  set  of  measurements  then 
continue,  otherw  ise  try  a  new  interpretation  for  die  initial  set  of  measurements.  The  advantage  of  this  stratagy 
is  diat  it  exploits  die  constraints  imposed  by  the  (hypothesized)  initial  conditions. 

12.3.3.2  Prediction 

Making  predictions  by  envisioning  is  like  problem-solving  by  exhaustively  generating  die  search 
space  -  it  works,  but  surely  we  can  generally  get  by  with  less  work.  Two  kinds  of  prediction  questions  are 
"Can  this  state  occur?"  (questions  of  attainability )  and  "Where  will  die  system  end  up  eventually?"  (questions 
of  disposition).  Wc  consider  attainability  questions  first. 

In  classical  problem  solving,  heuristic  search  is  used  to  construct  a  path  from  the  initial  state  to  the 
goal  state.  To  cast  prediction  in  diis  mold  wc  must  introduce  some  notion  of  operator.  The  obvious  notion  is 
dial  an  occurrence  of  some  process  or  processes  should  count  as  an  operator  diat  reduces  the  difference 
(described  as  quantity  space  values  and  the  statuses  of  instances)  between  a  situation  arid  die  goal.  In  many 
problem-solving  situations  it  is  more  convenient  to  work  backwards  from  die  goal.  For  prediction  this  docs 
not  appear  to  be  die  case,  since  the  number  of  potential  operators  is  large  and  because  it  ignores  the 
constraints  imposed  by  die  initial  conditions.  Working  forward  corresponds  to  selecting  a  subset  of  die 
possible  changes  presented  by  limit  analysis  to  carry  on  with.  While  this  might  speed  up  finding  a  situation 
dial  does  occur,  if  the  situation  doesn't  occur  (and  if  we  don’t  introduce  arbitrary  resource  limitations)  dicn 
wc  will  do  the  same  amount  of  work  as  envisioning.  T  his  suggests  developing  seperate  medrods  to  quickly 
rule  out  suites  which  cannot  exist.  If.  for  instance,  there  is  no  water  in  any  form  in  a  situation  and  no  process 
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which  generates  it  from  some  other  substance,  then  a  situation  in  which  water  appears  is  impossible.  I  suspect 
that  ruling  out  possible  states  might  profit  from  consequent  reasoning,  but  I  have  no  evidence  one  wav  or  the 
oilier. 

To  figure  out  what  final  suites  a  system  might  reach,  we  might  try  ignoring  the  initial  conditions  and 
determine  till  states  that  are  possible  from  the  individuals  and  instances  in  the  elaborated  situation.’  Those 
states  which  have  no  consistent  quantity  hypotheses  arc  possible  final  states.  Now  the  problem  is  reduced  to 
the  problem  of  finding  w  hich  of  these  suites  arc  attainable. 

12.3.3.3  Planning 

Another  way  we  use  our  common  sense  knowlegc  of  physics  is  in  constructing,  analyzing,  and 
debugging  plans  that  involve  the  physical  world.  Consider  assembling  a  printed  circuit  board.  If  we  w'erc 
constructing  an  assembly  plan  from  first  principles,  a  fragment  of  our  reasoning  might  look  like  this: 

A  component  is  connected  by  soldering  it  to  pads:  this  requires  melting  solder  that  is  in  contact  it  ith 
both  the  pad  and  the  wire.  A  soldering  iron  has  a  temperature  which  is  greater  than  the  melting  point  of  solder, 
so  placing  it  in  contact  with  the  w  ire  and  pad  to  establish  a  flow  path  for  heat  will  do  the  job.  However,  the 
soldering  iron 's  temperature  is  high  enough  to  damage  many  of  the  components.  So  whatever  path  the  soldering 
iron  moves  through  had  better  not  come  too  close  to  those  components. 

Two  things  have  occ tired  in  this  scenario:  knowledge  of  objects  and  processes  has  been  used  to 
generate  a  piece  of  a  plan  for  accomplishing  a  task  (use  a  soldering  iron  to  create  a  heat  flow  which  w  ill  cause 
the  solder  to  melt),  and  constraints  are  placed  on  any  elaboration  of  the  plan  to  avoid  undesired  effects  (don’t 
bring  the  iron  near  heat-sensitive  components  on  the  way).  Suppose  further  that  we  have  generated  a 
complete  plan,  and  executed  it  on  a  particular  circuit  board.  Ihc  report  we  receive  is  that  several 
heat-sensitive  components  on  the  board  were  damaged.  We  might  then  decide: 

The  hcaf-scinitiu'  components  were  brought  to  loo  high  a  temperature  sometime  during  assembly:  the 
only  time  there  was  an  injho  nee  on  their  temperature  was  during  soldering.  Next  lime  1  won't  hold  the  iron  on 
them  for  so  long. 

This  ■•xample  of  debugging  requires  a  differential  analysis:  we  must  find  what  aspects  of  the 
situation  are  responsible  for  the  undcsircd  event  and  figure  out  how  to  modify  the  plan  to  prevent  them.  QP 
theory  should  be  useful  in  generating  and  analyzing  such  plans.  The  first  step  in  plan  generation  might  be  to 
describe  the  desired  behavior  as  a  partial  history  for  the  objects  involved.  Initially  plan  steps  might  be 
generated  by  synihesi/mg  difference  operators  from  the  process  vocabulary  and  using  these  operators  to 
create  a  plan  by  standard  means-end  analysis.  further  constraints  on  tbe  plan  steps  might  be  determined  by 


1.  This  is  essentially  how  de  Klcer’s  TNVISION  proceeds  -  it  generates  consistent  stales  for  the  device 
network,  and  then  finds  all  the  transitions  between  them.  In  general  it  will  do  more  work  than  the  envisioning 
procedure  presented  here,  because  it  will  generate  suites  that  are  unattainable  from  the  initial  state. 
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analy/ing  the  possible  transitions  between  distinct  episodes  of  the  planned  behavior;  the  plan  must  be 
designed  so  that  the  transition  to  the  next  planned  behavior  is  the  one  that  actually  occurs.  Conditions  to 
prevent,  such  as  heal  damage  above,  are  modelled  by  requiring  that  certain  transitions  and  processes  not 
occur. 

Debugging  a  failed  plan  (and  sometimes  elaborating  a  plan)  requires  differential  diagnosis  to  figure 
out  what  should  Ire  changed  so  that  what  is  desired  occurs,  as  opposed  to  what  actually  occurcd  (or  might 
occur).  Differential  qualitative  analysis  should  be  a  useful  technique  for  providing  such  answers. 

12.3.3.4  Design 

Another  interesting  problem  is  design,  the  problem  of  developing  specifications  for  a  constructable 
artifact  which  exhibits  a  desired  behavior.  Aside  from  the  importance  of  understanding  the  design  process  in 
general,  examining  mechanical  design  should  illuminate  two  important  issues  in  naive  physics.  First, 
mechanical  design  could  drive  the  development  of  extension  theories  for  quantities  and  functions,  since 
estimates  of  empirical  factors  such  as  strength  of  materials  often  seem  important  in  ruling  out  classes  of 
designs.  Second,  evaluating  potential  designs  will  require  a  better  understanding  of  how  to  integrate 
contraint-oriented  reasoning  with  causal  reasoning.  Consider  designs  for  perpetual  motion  machines.  While 
many  explanations  of  how  they  work  can  be  rejected  because  they  ignore  certain  physical  processes  (usually 
some  form  of  friction),  other  explanations  can  only  be  rebutted  by  detailed  consideration  of  energy 
conservation.  While  a  start  has  been  made  on  such  reasoning  (sec  section  4.5),  much  remains  to  be  done. 

12.3.4  Qualitative  Kinematics 

Qualitative  theories  of  shape  and  space  will  be  required  in  addition  to  a  qualitative  dynamics  to 
construct  a  full  naive  physics.  While  the  broad  outlines  for  theories  of  space  ([Forbus.  1981].|Simmons,  1984]) 
and  shape  ([llradv.  19X4|)  exist,  we  seem  to  be  a  long  ways  from  theories  which  can  duplicate  the  wide  range 
of  everyday  phenomena  people  reason  about.  Hvcn  so.  die  eventual  goal  of  uniting  dynamics  and  kinematics 
suggests  two  constraints  on  the  structure  of  a  qualitative  kinematics.  First,  die  primary  goal  of  a  qualitative 
kinematics  is  to  determine  possible  geometric  interactions  between  objects.  Fxamples  include  determining 
whether  or  not  something  will  roll  on  a  particular  surface  and  what  objects  lie  in  a  particular  direction  from 
another.  Second,  when  possible,  a  qualitative  kinematics  should  suggest  ways  of  decomposing  a 
multidimensional  problem  into  a  connected  set  of  one-dimensional  problems.  For  instance,  when  reasoning 
about  what  a  rolling  object  will  collide  with,  the  various  object  boundaries  along  the  direction  of  its  path 
could  be  modelled  as  elements  in  a  position  quantity  space,  ordered  by  their  distance  along  the  path  from  the 
object.  I  unit  analysis  would  then  predict  that  it  might  collide,  might  stop  rolling  due  to  friction,  or  might  stop 
just  at  the  boundary  of  die  first  obstacle. 

12.3.5  Learning 

I'nlike  formal  physics,  most  of  our  common  sense  models  of  the  physical  world  appear  to  be  derived 
from  experience  in  the  world.  Since  everyone  docs  learn  some  version  of  naive  physics,  it  seems  a  belter 
candidate  for  exploring  experiential  learning  than  domains  people  don't  learn  without  a  teacher.  Also, 
learning  research  is  often  hampered  because  the  form  of  the  target  representation  is  itself  a  research  problem. 
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Without  claiming  Ql’  tlicory  is  die  final  wind  on  qualitative  dynamics,  its  existence  makes  studying  how  such 
know  lege  is  acquired  more  attractive. 

A  theoretical  framework  to  account  for  human  learning  in  physical  domains  is  already  under 
construction  [I  'orbus  &  Centner.  1 984].  The  framework  proposes  a  learning  sequence  of  four  types  of 
physical  models  in  each  domain,  using  concepts  from  QP  theory  to  help  describe  the  contents  of  the  models 
^  and  Centner's  Structure-Mapping  theory  of  analogy  and  non-literal  comparisons  [Centner.  1983]  to  help 

describe  the  computations  that  move  a  learner  from  one  type  of  model  to  another.  We  have  begun 
psychological  experiments  to  explore  this  framew  ork;  computer  experiments  arc  also  planned. 


12.3.6  1C  A I  &  engineering  problem  solving 
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Since  many  engineered  devices  are  implemented  as  physical  systems.  QP  theory  should  be  useful  in 
reasoning  about  diem.  One  application  is  providing  part  of  a  representation  language  for  intelligent 
computer-aided  instruction  (1CAI).  An  important  part  of  an  expert's  knowledge  of  a  system  is  a  qualitative 
understanding  of  how  it  works.  To  the  extent  that  QP  theory  models  our  qualitative  understanding  of 
dynamical  systems,  a  program  using  it  can  generate  explanations  that  a  student  will  find  easy  to  understand. 
Indeed.  QP  theory  was  developed  in  part  to  be  used  in  the  STHAMKR  project,  whose  goal  is  to  provide 
instruction  about  steam  propulsion  plants  for  Navy  trainees.5  Only  now  arc  die  domain  models  approaching 
the  quality  needed  to  provide  such  instruction,  and  better  implementation  techniques  will  of  course  be 
needed  to  provide  die  desired  quality  of  interaction. 

One  interesting  implementation  strategy  is  to  construct  a  tutor  compiler.  Current  qualitative 
reasoning  programs  work  from  first  principles  in  constructing  explanations.  This  is  analogous  to  setting  a 
human  domain  expert  down  in  front  of  a  system  he  has  never  seen  before  and  expecting  him  to  understand  it 
well  enough  to  generate  coherent  explanations  in  real  time.  Using  human  instructors  to  teach  this  way  is 
obviously  a  bad  idea,  so  why  should  we  expect  our  programs  to  do  better?  The  alternative  is  to  construct  a 
program  w  hich  takes  as  its  input  a  system  to  be  understood  and  a  specification  of  the  class  of  quesdons  which 
arc  to  be  asked  about  it.  I  he  output  of  this  program  would  be  a  specialized  tutoring  program  that  could,  in 
real  time,  answer  that  class  of  questions  about  the  system  in  question.  This  technique  would  have  several 
advantages,  for  example,  the  qualitative  reasoning  system  in  die  compiler  itself  need  not  be  especially  fast, 
and  more  sophisticated  techniques  for  generating  explanations  could  be  employed  dian  would  otherwise  be 
possible  (such  as  McDonald's  MUM  BIT!  [McDonald,  1983]). 

As  extension  theories  are  developed.  Ql’  theory  should  become  useful  in  other  kinds  of  engineering 
and  control  tasks  as  well.  Individual  views  could  be  used  to  express  desirable  and  undesirable  operational 
characteristics,  for  example,  in  operating  a  boiler  the  fuel-air  ratio  must  not  become  too  rich  or  too  lean;  in 
either  case  smoke  pours  out  the  boiler  stack,  which  is  bad  if  you  want  not  to  be  seen  and  combustion 
efficiency,  hence  fuel  economy,  will  drop.  A  good  boiler  design  will  provide  operating  regions  in  which  the 
individual  views  representing  these  undcsircd  conditions  are  inactive.  Similarly,  these  descriptions  could  be 


1  I  lie  S  1 1 W1I  K  proiect  is  a  joint  enterprise  of  Bolt,  Berancck.  and  Newman,  Inc.  and  the  Navy  Personnel 
Research  am)  I  >■  v.  lopment  C  entci  See  [Stevens,  el  al..  1981]  for  all  overview. 
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used  in  synthesi/ing  control  strategies,  by  determining  what  measurements  indicate  a  state  from  which  a  view 
instance  representing  an  undesirable  condition  will  become  active  and  what  corrective  action  must  be  taken  to 
ensure  that  the  particular  change  w  ill  not  occur. 

Another  interesting  possibility  is  building  a  hypothesizes  A  hypolhesi/cr  is  an  interpretation 
module  which  either  takes  measurements  from  operators  of  a  system  or  gathers  data  itself  from  instruments, 
and  w  ill  evaluate  an  operator’s  theories  about  what  is  happening  in  the  system.  Such  a  program  could  serve  as 
a  devil’s  advocate,  pointing  out  inconsistencies  in  an  operator's  theory  or  suggesting  alternate  interpretations 
for  the  data.  This  would  be  useful  because  it  seems  that  a  common  source  of  human  error  in  operating 
complex  systems  (such  as  nuclear  power  plants)  is  premature  commitment  to  a  particular  theory  about  the 
state  of  the  system  (see  [Pew  et  al..  1982]).  l  or  example,  the  incident  at  die  Three  Mile  Island  reactor 
probably  wouldn't  have  happened  if  the  operators  had  thought  of  the  alternate  explanation  for  the 
overpressure  in  the  reactor  vessel  --  that  instead  of  being  too  high,  die  level  of  cooling  waier  was  too  low,  dius 
causing  a  boiling  diat  raised  die  pressure. 


12.3.7  Ollier  applications 

Historically,  the  success  of  differential  equations  in  physics  led  to  attempts  to  apply  diem  to 
problems  from  other  fields,  such  as  economics.  To  die  extent  diat  differential  equations  prove  useful  in 
reasoning  about  a  domain,  QP  theory  should  be  similarly  useful.  In  economics,  for  example,  physical 
limitations  often  prove  important.  Storage  capacities,  transportation  capacities,  and  rates  of  manufacture  are 
important  examples  (sec  (iorrester,  1968],  |Slansficld.  1980J).1  The  features  which  make  qualitative  models 
useful  for  physical  reasoning,  such  as  the  ability  to  characterize  die  classes  of  diings  diat  can  happen  even  with 
very  little  data,  should  be  useful  in  other  domains,  especially  in  domains  where  numerical  data  is  unreliable  or 
hard  to  come  by. 

However,  caution  seems  advisable  in  attempting  such  applications.  There  seems  to  be  no  real 
agreement  on  what  mathematical  descriptions  arc  appropriate  in  economics,  hence  it  will  be  hard  to  judge 
whether  a  qualitative  model  is  correct.  In  addition,  die  very  structure  of  die  domain  can  change  with  time;  for 
instance,  the  tax  code  can  change.  These  factors  make  modelling  economics  much  harder  dian  modelling 
physics. 


12.4  Previous  Work 

The  first  attempts  to  formalize  processes  modelled  them  as  collections  of  interacting  automata 
[Prow  n  et  al..  1973]  or  extended  STRI PS-like  operators  [Hendrix,  1973],  l  .ct  us  examine  each  in  turn. 

Brown's  automat, i-bascd  system  was  designed  to  generate  explanations  for  intelligent 


1.  Interestingly.  Samuelson  was  one  of  the  first  to  describe  (he  possihilty  of  using  qualitative  models  and  to 
point  out  that  their  inherent  ambiguity  would  make  prediction  difficult.  Subsequent  developments  in 
qualitative  modelling,  however,  suggest  his  views  were  overly  pessimistic,  at  least  for  physical  domains. 
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computer-aided  instruction.  Quantities  and  processes  were  represented  by  individual  automata  whose  states 
represented  classes  of  values  or  activities  (such  as  a  quantity  decreasing  or  a  particular  activity  in  a  sequence 
occuring).  Time  was  modelled  by  specifying  that  automata  representing  quantities  changed  instantly  while 
automata  representing  processes  took  an  interval  of  time  to  change.  Although  arbitrary  I.1SI’  code  was 
permitted  in  specifying  state  transitions,  in  practice  state  changes  were  predicated  on  suite  changes  in  other 
automata.  While  adequate  for  generating  explanations  of  fixed  phenomena,  the  automata  representation  is 
too  brittle  for  most  reasoning  tasks.  I'or  example,  there  is  no  influence-like  mechanism  for  dynamically 
combining  effects,  thus  all  interactions  must  be  foreseen  in  advance  by  die  model  builder.  The  process 
models  are  similar  to  encapsulated  histories,  in  that  they  presuppose  the  outcome  of  die  activity  of  the 
processes  dicy  describe.  1  lencc  such  models  w  ill  be  insensitive  to  changing  conditions. 

Hendrix's  system  was  designed  to  provide  a  world  model  for  robot  planning.  While  a  significant 
advance  over  the  models  of  action  available  at  die  time,  the  importance  of  qualitative  descriptions  had  not  yet 
been  understood,  (  or  example,  the  values  of  numbers  were  known  real  numbers,  and  relationships  between 
parameters  were  expressed  as  numerical  constraint  equations.  The  process  descriptions  were  used  for 
simulation,  solving  simultaneous  equations  to  determine  precisely  when  the  collection  of  active  processes 
would  change.  Since  the  goal  was  to  model  general  processes  (non-physical  as  well  as  physical),  add  lists  and 
delete  lists  were  also  used  to  specify  effects.  Qualitative  Process  theory,  by  using  qualitative  descriptions  and 
focusing  on  physical  processes  only,  can  be  used  in  several  other  kinds  of  deductions  in  addition  to 
simulation,  often  requiring  less  information  to  draw  interesting  conclusions. 

Recently  several  attempts  have  been  made  to  model  temporal  reasoning,  including  [Allen,  1981), 
[McDermott.  19S2J.  Allen's  model  is  the  one  assumed  here,  both  because  meet  seems  to  be  the  appropriate 
relationship  between  pieces  of  a  history  and  because  modeling  instants  as  "very  short"  intervals  makes 
formuli/mg  certain  facts  involv  ing  derivatives  easier.  McDermott's  axioms  for  time  contain  several  interesting 
ideas,  including  the  chronicle  representation  of  possible  futures  and  its  implications  for  planning. 

1 'nfortun.itely.  McDermott  expects  too  much  of  his  temporal  logic.  For  example,  die  logic  includes  the 
notion  of  a  "lifetime",  i.c„  ow  long  you  can  assume  a  fact  to  be  true  once  you  have  observed  it  to  be  true. 
McDermott  claims  lifetimes  must  be  provided  outside  the  logic,  by  fiat  ("The  senses  actually  tell  you  about 
persistences")  because  having  axioms  that  prov  ide  persistences  could  lead  to  contradictions.  lliis  ad  hoc 
notion  is  needed  precisely  because  the  logic  is  developed  independently  from  a  theory  of  dynamics.  Given  a 
dynamics  (and  the  ability  to  make  closed  world  assumptions  about  individuals  and  relationships),  wc  can 
dedjue  what  will  and  will  not  change.  If  we  need  an  estimate  of  how  long  something  will  remain  true,  wc  can 
figure  out  how  long  it  is  likely  to  be  before  something  elicit  can  change  it  occurs.  To  use  McDermott's 
example,  if  you  look  at  a  boulder  you  might  be  able  to  estimate  that  if  you  came  back  in  50  years  it  would  still 
be  there  (a  weaken  conclusion  than  implied  by  the  notion  of  lifetimes,  but  it  will  do).  However,  if  you  arc  told 
that  there  is  dynamite  underneath,  your  estimate  will  be  considerably  different.  In  cither  case,  if  you  came 
back  the  next  day  and  discovered  the  boulder  was  some  distance  from  its  original  location,  you  would  have 
some  theory  about  why .  not  just  the  feeling  that  your  senses  had  lied  to  you.  In  addition,  McDermott's  model 
of  quantities  uses  average  rate  instead  of  derivatives,  which  means  many  of  die  dynamical  conclusions 
described  here  (such  as  distinguishing  oscillation  from  stutter)  cannot  be  drawn. 
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12.5  Current  Work 

Since  the  original  publication  of  Qualitative  Process  theory  ([I'orbus,  1981]),  several  projects  have 
adopted  or  extended  some  of  its  ideas.  We  will  examine  them  here. 

Johan  dc  Klccr  and  John  Seely  brown  have  continued  to  develop  their  device-centered  qualitative 
physics  [dc  Klccr  &  brown,  1984J.  In  particular,  they  have  adopted  the  quantity  space  representation  for 
numerical  values  to  allow  more  precise  descriptions  of  state  and  state  transitions.  Brian  Williams  has  also 
developed  a  similar  device-centered  physics,  intended  for  reasoning  about  Vi  SI  circuits  [Williams,  1984], 
Williams  focuses  on  the  classical  notion  of  continuity  in  an  attempt  to  bring  intuitive  and  formal  mathematical 
models  in  line.  While  the  organizing  principle  for  these  dynamical  frameworks  are  different  from  QP  theory, 
on  the  w  hole  their  notion  of  quantity  is  now  the  same.  The  major  exception  concerns  the  equality  change 
law;  both  deny  case  2  of  the  law,  which  requires  that  transitions  back  to  equality  in  quantities  that  are 
infinesimally  different  occur  in  an  instant.  This  means  stutter  cannot  occur  in  their  systems,  depriving  them 
of  a  simple  means  of  detecting  dynamical  equilibriums. 

Device-centered  ontologies  have  also  been  used  to  simulate  and  explain  tire  operation  of  turbojet 
engines  [Rajagopalan,  1894J  and  diagnose  failures  in  circuits  [Pan,  1983).  both  systems  use  a  mixture  of 
qualitative  knowledge  to  describe  states  and  rough  behavior,  with  quantitative  information  used  to  reduce  the 
degree  of  ambiguity  in  the  descriptions. 

Reid  Simmons  has  applied  process  descriptions  to  the  problem  of  geological  map  interpretation 
[Simmons,  19831.  Given  a  diagram  that  represents  a  formation,  his  system  ascertains  whether  or  not  a 
proposed  sequence  of  occurrences  of  geological  processes  can  give  rise  to  it.  Since  in  this  domain  it  is 
assumed  that  only  one  process  occurs  at  a  time,  his  system  represents  occurrences  of  processes,  that  is, 
encapsulated  histories,  rather  than  processes.  Changes  in  the  existence  of  objects,  such  as  an  occurrence  of  a 
process  creating  or  destroying  an  individual,  arc  modelled  by  explicit  statements  in  the  description  of  the 
occurrence.  T  his  means  all  changes  in  existence  must  be  forsccn  in  advance  by  the  model  builder,  which  is 
reasonable  for  the  geological  domain.  Importantly,  these  descriptions  also  provide  equations  that  describe  the 
net  effects  of  each  occurancc.  Given  a  set  of  numerical  measurements  from  the  diagram,  these  equations  are 
woven  together  to  check  the  consistency  of  die  measurements  against  die  hypodiesized  sequence  of  events. 

J  o  make  all  this  work.  Simmons  also  developed  a  representation  of  intervals  to  serve  as  an  extension  dieory 
for  representing  quantidcs. 

ben  Kuipcrs  has  appl.ed  some  of  the  ideas  of  QP  theory  in  understanding  causal  reasoning  in 
medicine  ([Kuipcrs.  1982|[Kuipcrs  &  Kassircr,  1983]).  While  adopting  the  ideas  of  die  quantity  space  and 
qualitative  proportionalities  (he  calls  diem  die  "value  space"  and  "M"  respectively),  he  does  not  explicitly 
represent  processes  or  even  objects.  His  "causal  structural  descriptions"  are  equations,  as  illustrated  by  die 
fact  that  his  program  subjects  them  to  algebraic  manipulation.  This  prevents  his  system  from  drawing 
conclusions  about  changes  in  die  existence  of  individuals,  by  abandoning  processes,  lie  also  loses  an 
important  source  of  constraint.  Consider  the  scenario  in  figure  72.  which  is  equivalent  to  the  example  in 
|Kuipers.  1982|.  In  dais  scenario,  an  object  is  placed  in  thermal  contact  with  two  temperature  sources,  with  the 
object  being  initially  hotter  than  one  source  and  colder  than  another.  In  Kuipcr  s  system  diis  problem  leads 
to  "intractable  branching"  in  the  envisionment.  forcing  his  system  to  re-w  rite  the  equations  involved  and  then 
perform  a  "perturbation  analysis"  on  the  new  set  of  equations.  GIZMO's  answer,  by  contrast,  is  quite  simple 
(figure  73  shows  the  situation  plot,  while  figure  74  shows  GI/MO  s  synopsis).  I  he  initial  process  structure  (a 
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Fig.  72.  Scenario  for  Kuipcr's  double  heat  flow  example 
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defScenario  Double-Heat-Flow 


(Individuals  STOVE 

ATMOSPHERE 

SLOB) 

(Facts  ( P iece-of -Stuf f  8L08) 

(Temperature-Source  STOVE) 
(Temperature-Source  ATMOSPHERE) 
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(Heat-path  BL08-SURFACE) ) 
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(Heat-Connection  BLOB-SURFACE 
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(A  (temperature 
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ATMOSPHERE)))) 


(In-Situation  Start 
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(Greater-Than  (A 

(A 


ATMOSPHERE  BURNER  BLOB-SURFACE) 
(temperature  STOVE)) 
(temperature  BLOB))) 
(temperature  BLOB)) 

(temperature  ATMOSPHERE)))))) 


Fig.  73.  Double  heat  flow-  envisionment 


heat  flow  from  stove  to  blob  and  a  heat  How  from  blob  to  atmosphere)  never  changes  because  doing  so  would 
violate  os  continuity.  There  is  a  three  way  ambiguity  in  the  change  in  die  blob's  heat  (and  hence  temperature) 
because  the  relative  magnitudes  of  the  flow  rates  arc  unknown.  But  if  the  blob's  temperature  is  increasing  or 
decreasing  the  flow  rales  will  eventually  become  equal,  causing  the  temperature  to  be  constant,  and  if  die 
temperature  is  ever  constant  it  will  remain  so  forevermore.  The  only  way  for  "intractable  branching"  to  arise 


lorbus 


168- 


QP  theory 


Pig.  74.  Double  heat  flow  synopsis 

In  situation  S10.  there  is  a  heat  flow  from  BLOB  to 
ATMOSPHERE  and  a  heat  flow  from  STOVE  to  BLOB.  The 
heat  of  ATMOSPHERE  is  increasing.  The  heat  of  STOVE  is 
decreasing.  With  some  exceptions,  the  other  quantities  aren't 
changing. 

The  changes  in  the  flow  rate  of  the  heat  flow  from 
BLOB  to  ATMOSPHERE,  the  flow  rate  of  the  heat  flow  from 
STOVE  to  BLOB,  the  heat  of  BLOB,  and  the  temperature  of  8L08 
are  not  known  at  S10.  The  situations  S13,  S12,  and  Sll 
represent  the  various  possibilities. 


Sll  represents  a  particular  hypothesis  about  S10. 

Sll  assumes  that  the  flow  rate  of  the  heat  flow  from 

BLOB  to  ATMOSPHERE  is  decreasing,  the  flow  rate  of  the  heat 

flow  from  STOVE  to  BLOB  is  increasing,  the  heat  of 

BLOB  is  decreasing,  and  the  temperature  of  BLOB  is  decreasing. 

After  some  time,  the  flow  rate  of  the  heat  flow  from 
BLOB  to  ATMOSPHERE  and  the  flow  rate  of  the  heat  flow  from 
STOVE  to  BLOB  become  equal.  This  leads  to  situation  S12. 


S12  represents  a  particular  hypothesis  about  S10. 

S12  assumes  that  the  flow  rate  of  the  heat  flow  from 
BLOB  to  '-'MOSPHERE  is  constant,  the  flow  rate  of  the  heat 
flow  from  STOVE  to  BLOB  is  constant,  the  heat  of  BLOB  is  constant, 
and  the  temperature  of  BLOB  is  constant. 

No  changes  are  possible. 


S13  represents  a  particular  hypothesis  about  S10. 

S13  assumes  that  the  flow  rate  of  the  heat  flow  from 

BLOB  to  ATMOSPHERE  is  increasing,  the  flow  rate  of  the  heat 

flow  from  STOVE  to  BLOB  is  decreasing,  the  heat  of 

BLOB  is  increasing,  and  the  temperature  of  BLOB  is  increasing. 

After  some  time,  the  flow  rate  of  the  heat  flow  from 
STOVE  to  BLOB  and  the  flow  rate  of  the  heat  flow  from 
BLOB  to  ATMOSPHERE  become  equal.  This  leads  to  situation  S12. 


is  if  irrelevant  elements  arc  added  to  the  quantity  spaces.1  Without  processes.  Kuipcr’s  program  has  no  clear 
guide  about  what  to  put  in  a  quantity  space. 

QP  theory  is  being  used  in  several  psychologically-oriented  projects  as  well.  A1  Stevens,  Dan  Weld, 
and  Albert  Boulanger  arc  using  QP  theory  in  constructing  a  theory  of  explanations  for  machines  [Weld,  1984], 
Also,  Allan  Collins  and  Dcdrc  Centner  are  using  QP  theory  to  express  theories  of  evaporation  in  order  to 
understand  how  to  shift  from  one  level  of  description  to  another. 


1.  As  it  happens.  Kuipcr's  program  placed  all  quantities  of  the  same  type  (c.g..  all  the  temperatures)  into  the 
same  quantity  space  (personal  communication). 
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14.  Appendix  1  -  DKBAC'LK 

I  his  appendix  describes  OFIIACI  F,  the  inference  engine  used  to  implement  GIZMO.  DFBACI.F' 
is  ,i  deseendem  of  McAllester's  Reasoning  Utility  Package,  called  RUP  (McAllcster.  19X2],  There  arc  several 
design  decisions  in  Rl  P  which  proved  inappropriate  in  implementing QP  theory,  and  several  extensions  were 
needed,  First  we  examine  the  problems  with  R IJP.  Then  we  describe  the  organization  of  DHBACI.K, 
including  the  "hooks”  for  adding  specialized  representations.  DFBACI  F's  closed-world  assumption 
mechanism  and  stack-discipline  premise  controller  are  described  next.  Finally,  the  quantity  representation 
used  in  GIZMO  is  presented  as  an  example  of  how  specialized  representations  may  be  implemented. 

14.1  Why  not  RUP? 

14.1.1  What  is  UUP? 

McAllester's  RUP  has  several  novel  features  which  make  it  useful  in  implementing  reasoning 
programs.  His  overall  model  of  an  inference  engine  (see  [McAllcster.  I9S0J)  contains  three  parts.  First,  a 
rule-like,  pattern-directed  component  instantiates  quantified  knowledge.  Second,  a  truth-maintenance  system 
(which  performs  unit  clause  resolution)  provides  propositional  reasoning  and  records  dependencies.  Third,  a 
premise  controller  decides  what  to  do  when  a  contradiction  occurs.  Despite  misgivings  about  the  details  of 
RUP,  McAllester's  overall  model  has  been  very  productive. 

To  instantiate  quantified  knowledge,  AMORD-like  rules  are  provided.  Unlike  AMORD,  however, 
the  rules  are  not  used  to  implement  rules  of  logical  inference  (such  as  modus  ponens).  Instead,  the  rules 
assert  propositional  statements  whose  consequences  arc  developed  by  the  I  MS.  This  frees  the  user  from 
writing  a  tedious  collection  of  inference  rules  for  propositional  logic,  especially  those  rules  which  require 
careful  control  to  avoid  runaway  generation  of  assertions.1  McAllcster  thus  advocates  the  strategy  of 
seperating  the  creation  of  a  description  from  reasoning  with  it,  a  strategy  w  hich  has  also  proven  useful  in 
constraint  networks. 

McAllester's  truth-maintenance  system  is  organized  so  that  propositional  reasoning  is  performed  via 
constraint  propagation.  Asserting  an  implication,  for  instance,  causes  a  rule  to  run  that  inserts 
disjunctive-normal  clauses  in  the  I  MS  which  provide  all  the  deductive  import  of  that  implication.  Similar 
rules  are  provided  for  the  other  logical  connectives.  Since,  unlike  full  resolution,  the  IMS  never  introduces 
new  terms,  the  deductions  the  IMS  makes  arc  incomplete  but  rapid,  indeed  roughly  linear. 

RUP  provides  two  default  handlers  and  hooks  for  user  programs  that  decide  what  to  do  when  a 
contradiction  occurs.  One  default  handler  simply  asks  the  user  which  premise  should  be  retracted.  'Hie  other 
default  handler  uses  optional  nunieiical  certainties  that  can  be  attached  to  IMS  nodes  in  order  to  retract  die 
"least  likely"  fact.  Once  a  node  is  chosen  for  retraction,  the  I  MS  automatically  creates  clauses  that  serve  as 


1.  The  now -classical  example  is  the  rule  for  and  introduction:  given  a  and  b.  it  is  always  the  case  that  (and  a 
b)  is  true.  Hut  the  simplest  rendering  of  this  inference  rule  will  lead  to  generating  an  unbounded  number  of 
assertions,  since  an  and  statement  itself  can  be  an  argument  to  an  and  statement.  Usually  problems  like  this 
one  are  avoided  by  rely  ing  on  consequent  reasoning. 
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nogoods.  to  prevent  that  particular  conjunction  of  premises  from  ever  being  believed  again. 

In  addition.  RUP  provides  an  equality  sub  system  that  allows  certain  conclusions  to  follow  from 
substitutions  of  equals  for  equals.  Given  an  arbitrary  term,  the  "simplest  name"  of  that  term  can  be 
computed  on  demand.  I  he  intention  is  that  a  user-provided  function  to  determine  the  notion  of  simplicity 
will  allow  the  equality  system  to  prov  ide  much  of  the  inferential  power  the  user  needs. 

14.1.2  The  equality  system  is  inefficient 

While  the  equality  system  seems  to  be  adequate  for  small  examples,  paging  problems  cause  it  to 
perform  badly  with  a  medium-si/ed  database  (several  hundred  assertions).  Suppose  one  uses  equality  to 
assign  values  to  sign  references,  e.g., 

(»  (s  (d  (level  (at  (c-s  water  f)  s  0 ) ) ) )  -1) 

Using  an  early  R  UP-bascd  implementation,  determining  the  simplest  name  under  equality  for  die  change  in 
the  water  level  in  f  (i.c.,  -l),  can  lake  up  to  5  minutes.  Such  performance  is  unacceptable,  even  for 
experimental  purposes. 

If  the  equality  system  were  an  independent  component  dien  one  could  simply  not  use  it.  1  lowcvcr. 
the  equality  system  strongly  constrains  die  design  of  RUP's  database.  To  make  die  equality  system  work, 
each  subexpression  of  every  term  must  be  a  database  item  in  its  own  right.  The  reason  is  that  evaluating  an 
expression  involves  looking  at  each  component  to  see  if  dierc  is  a  better  substitution  -  for  f,  water,  c-s,  dien 
(c-s  water  f),  etc.  in  the  example  above.  This  leads  die  retrieval  all  over  the  database  and  makes  die 
database  needlessly  large,  assuming  diat  we  do  not  always  need  to  refer  to  every  term  seperately. 


14.1.3  T  he  premise  controllers  provided  arc  too  crude 

The  premise  controllers  provided  by  RUP  arc  too  simple  for  complicated  reasoning  tasks.  Merely 
asking  die  user  precludes  writing  programs  that  deliberately  introduce  assumptions  to  use  proof  by 
contradiction.  Using  the  numerical  premise  controller  assumes  that  one  can  assign  numerical  certainty  values 
to  premises  which  may  be  interpreted  globally,  i.c..  any  two  premises  can  be  ordered  with  respect  to  relative 
certainty  when  handling  a  contradiction.  These  shortcomings  can  be  overcome,  of  course  -  McAllcster  wisely 
provided  hooks  for  users  to  v.  rite  their  own  contradiction  handlers.  A  more  serious  limitation  is  the  automatic 
construction  of  nogood  clauses.  Constructing  a  nogood  clause  implicitly  assumes  the  underlying  reason  is 
monotonic,  that  is.  no  additional  assumptions  could  ever  lead  to  die  premises  involved  in  a  contradiction 
being  consistent.  While  McAllcster  eschews  non-monotonicity,  dicre  are  many  cases  (such  as  the  set 
mechanism  described  below)  where  it  is  quite  useful. 


14.1.4  Adding  specialized  representations  is  hard 

RUP  proved  to  be  a  valuable  tool  for  prototyping.  Simple  experimental  systems  can  be  quickly  built 
using  a  combination  of  pattern-directed  rules  and  MSP  code  to  test  out  ideas.  However,  to  increase  overall 
cli’k  vnev  it  becomes  necessary  to  add  specialized  representations  to  speed  up  critical  deductions.  This  is 
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more  difficult  in  RUI\  due  to  its  many  assumptions  about  the  form  of  the  term  database.  It  ean  be  done 
(Reid  Simmons,  personal  communication),  but  by  abandoning  the  term  database  entirely  greater  efficiency 
can  be  gained. 


14.2  DFIIAC'I.K.  organization 

DFBACI.K  attempts  to  retain  the  good  features  of  RUP  while  avoiding  its  shortcomings.  Here  the 
differences  between  DKBACLK  and  RUP  are  briefly  described,  rather  than  providing  a  manual  or  primer. 


14.2.1  Assertions 

The  function  referent  maps  from  s-expressions  to  assertions  in  the  database,  referent  docs  not 
add  the  assertion  to  the  database  if  it  isn’t  there,  like  RUP's  term-soft.  A  default  second  argument  is 
provided  which,  if  non-nil,  causes  an  appropriate  assertion  to  be  created.  It  is  important  to  remember  that 
merely  being  in  the  database  does  not  mean  that  the  assertion  is  believed  to  be  taic;  each  assertion  has  an 
explicit  IMS  node  whose  state  (true,  false,  or  unknown)  represents  the  system’s  belief  in  it. 

Two  differences  from  RUP  arc  worth  mentioning.  As  in  RUP,  a  term  is  associated  with  a  class , 
which  is  used  as  an  index  for  retrieval.  The  class  of  (->  p  q ) .  for  example,  is  ->.  Assertions  are  indexed  by 
their  CAR  if  their  form  is  a  list,  and  themselves  otherwise.  However,  several  s-expressions  can  refer  to  the 
same  assertion.  This  allows  an  assertion  to  be  indexed  several  ways  to  allow  more  efficient  retrieval.  For 
example,  a  qualitative  proportionality  is  indexed  by  these  three  expressions: 

(qprop  A  B) 

(A  constrained-by  B) 

(B  constrains  A) 

The  second  form  allows  the  system  to  efficiently  retrieve  all  constrainers  of  a. 

The  other  important  difference  is  that  creation  and  referencing  assertions  can  be  data-dircctcd. 
Specialized  representations  can  be  constructed  by  creating  new  data  structures  which  include  the  same 
properties  as  a  standard  assertion  but  have  additional  properties  as  well.  We  will  see  how  this  technique  can 
be  used  to  implement  an  efficient  quantity  representation  below.  These  specialized  data  structures  arc  created 
and  referenced  by  functions  associated  with  the  class  data  structure. 

14.2.2  Rules 

RUP’s  rules  are  an  improvement  over  AMORI)  rules  in  dial  there  arc  more  conditions  under  which 
they  can  fire.  In  AMORI),  a  rule  fired  only  when  the  pattern  it  matched  was  true.  In  RUP  a  rule  can  fire 
when  the  pattern  is  true  or  false,  when  the  fact  is  merely  placed  in  the  database,  independently  of  whether  or 
not  it  or  its  negation  is  believed  (the  :  intern  condition),  when  die  fact  changes  belief  state,  or  fire  every  lime 
it  becomes  true,  false,  or  changes.  1  hese  distinctions  allow  rules  to  be  used  m  constructing  I  MS  structures  for 
propositional  reasoning  and  for  signalling  and  updating  external  representations  to  track  changes  in  die 
database.  These  distinctions  are  kept  in  DFBACI  F,  and  have  proved  quite  useful.  Making  domain 


lorhus 


-176- 


Ql’  theory 


knowledge  trigger  on  interning,  for  cx.imple,  in. ikes  reasoning  by  contradiction  rel.iti\el>  simple  and  c.m  be 
used  to  speed  up  cerium  algorithms  immensely  (see  situation  elaboration  in  section  9.1). 

Rules  in  Dl  liACI  li  differ  in  two  ways  from  those  in  RL:I’.  I  nst,  the  trigger  variables  are  bound  to 
the  s-expression  they  matched  rather  than  a  database  item  whose  referent  is  that  s-expression.  Ibis  choice 
was  made  both  because  in  using  RTI’  one  almost  always  coincrts  to  s-expressions  anyway  and  because  in 
I  )l  !i  \C  I  T  there  isn't  always  a  database  item  to  refer  to  for  every  s-expression.  Second,  an  assertion  can  have 
.m  optional  symbolic  assumption  type.  An  assumption  type  names  the  source  of  the  premise,  such  as 
E x i s tenr.e-L aw  in  the  domain  models  we  saw  previously.  This  information  is  used  bv  the  premise  controller 
when  analy/ing  a  contradic  uon.  so  we  will  defer  further  discussion  of  them  until  section  14.4. 

14.4  Closed-world  assumptions 

Making  closed-world  assumptions  appears  to  be  an  integral  part  of  common  sense  reasoning 
(McCarthy.  1980],  1  samples  of  closed-world  assumptions  used  in  Ql*  theory  include  assuming  that  the 
objects  one  knows  about  arc  the  only  relevant  ones,  and  that  one  knows  all  die  influences  on  a  quantity.  A 
particular  form  of  closed- world  assumption  that  is  useful  in  reasoning  about  naive  physics  is  the  closed -world 
assumption  on  set  membership.  In  particular,  given  some  explicit  list  of  members  in  a  set,  one  assumes  that 
the  set  is  composed  solely  d' these  members. 

While  this  kind  of  closed- world  assumption  could  be  implemented  by  the  now -classic  "negation  by 
failure"  rule,  in  DTIJACI.T  it  is  implemented  more  directly.  A  set  is  always  considered  to  be  the  property  of 
some  object,  and  its  structure  is  defined  by  an  element  relation  and  a  members  relation.  The  clement  relation 
describes  the  form  that  assertions  about  set  membership  take.  Tor  example,  if  has-acti ve-process  is  an 
element  relation  and  process-structure  is  a  members  relation,  then  if 

(SO  HAS- ACTIVE-PROCESS  PI-0) 

is  the  only  such  assertion  about  so,  the  assertion 

(SO  PROCESS-STRUCTURE  (PI-0)) 

would  be  believed.  This  assertion  is  justified  on  the  basis  of  the  positive  and  negative  instances  of  tire  clement 
relationships  (in  this  case,  the  positive  statement  that  pi-o  is  in  the  set  is  the  only  one  we  know  about)  and  an 
explicit  node  representing  the  closed-world  assumption.  Whenever  such  an  assumption  is  made,  rules  are 
created  to  look  for  new  facts  which  would  make  the  assumption  false. 

Importantly,  these  assumptions  are  made  consequently,  i.c.,  only  when  explicitly  requested  by  the 
user  or  a  program.  I  he  reason  is  subtle  --  suppose  a  program  is  making  assumptions  by  selecting  an  element 
from  each  of  a  number  of  sets,  such  as  occurs  in  performing  a  dependency-directed  search.  If  closed-world 
assumptions  are  made  whenever  possible,  there  can  be  a  new  set  constructed  whenever  a  choice  is  made. 

I  hese  sets  can  result  in  a  contradiction  that  wouldn’t  occur  if  choices  from  the  other  sets  had  been  made.  Ihe 
resulting  mappiopnate  backtracking  can  lead  to  entire  subspaccs  being  skipped  in  the  course  of  a 
d epc n de  n t  y  -  d  i  reel ed  sea rch . 
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14.4  I’rcinisc  control 

Wh.it  should  he  done  when  a  contradiction  oeenrs?  RUF  allows  the  user  to  hind  a  variable  that  the 
I  \1S  uses  to  select  a  premise  to  retract  from  the  set  of  assumptions  undei lying  the  contradiction.  Hut  this 
mechanism  is  not  enough,  since  what  should  he  done  depends  both  on  what  premises  underlie  the 
coni', idle  lion  and  on  what  computation  is  underway  til  the  lime,  l  or  example,  if  the  contradiction  involves  an 
assumption  being  made  as  part  of  a  dependency -directed  search  then  a  new  alternative  should  be  selected. 

I  his  suggests  re  binding  the  contradiction  handler  when  performing  such  a  search.  However,  even  if  such  a 
search  is  underway,  a  contradiction  may  arise  which  doesn't  depend  on  any  of  the  search  assumptions.  So 
merely  re-binding  the  contradiction  handler  is  insufficient.  If  we  assume  that  control  decisions  are  made  by 
programs  rather  than  rules,  then  a  stack-discipline  for  contradiction  handlers  seems  appropriate. 

Here's  how  1)1  HACl.K's  premise  controller  works.  First,  the  premises  are  tested  to  see  if  any  of 
them  involve  closed-world  assumptions,  as  outlined  above.  If  so.  it  tests  to  see  if  any  of  them  are  invalid.  If 
any  arc.  the  sets  involved  are  updated  and  control  is  returned  to  the  'I  MS.  Otherwise,  the  controller  goes 
down  the  stack  of  premise  handlers,  running  each  to  sec  if  it  is  relevant.  A  handler  can  either  return  Nil.  to 
indicate  that  it  is  irrelevant  to  the  current  contradiction,  a  premise  to  indicate  what  should  be  retracted,  or  T  to 
indicate  that  the  contradiction  has  been  handled  internally.  A  default  handler  which  asks  the  user  resides  at 
the  bottom  of  the  stack.1 

Programs  which  make  assumptions  must  do  two  tilings.  First,  if  any  special  action  should  be  taken 
when  a  contradiction  occurs  the  appropriate  handler  must  be  placed  on  the  premise  controller’s  stack.  A 
mi'cro  is  provided  to  do  this: 

(W’th-Contradiction-Handler 

<con trad i c t i on  handler* 

<0ady> ) 

Aside  from  placing  the  handler  on  the  stack,  this  form  also  ensures  that  the  handler  will  be  removed  in  case  of 
non-local  exits.  Second,  if  the  program  is  drawing  conclusions  that  rely  critically  on  particular  assumptions, 
then  it  must  test  whether  or  not  these  assumptions  still  hold  after  performing  some  operation  that  might 
change  them,  for  example,  when  influences  ate  resolved  the  results  .ire  justified  by  the  current  process  and 
v  iew  structures.  For  efficiency,  the  assumption  about  the  current  process  structure  is  fetched  at  the  beginning 
of  the  computation.  If  a  contradiction  occurs  during  processing  this  assumption  might  be  retracted.  Carrying 
■  mi  without  noticing  this  change  can  result  in  patently  incorrect  assertions  being  added  to  the  database.  Ihus 
the  program  cheeks  these  assumptions  each  time  something  has  happened  which  could  make  this  assumption 
invalid. 


1.  In  idJition.  a  dv.pl  ty -oriented  contradiction  inspector  is  provided  that  allows  the  premises  to  he  sorted  by 
assumption  upe.  dumped  for  fun  ire  inspection,  and  their  truth  values  manipulated  to  resolve  die 
■a  at i. idic tun:  Sm.i’  .a hi ti.id iv ■Huns  with  ov ci  1  >0  premises  draw n  from  over  twenty  assumption  types  have 
.iiisen  in  tile  vouise  of  debugging,  ihc  eonti.idictioii  inspector  is  a  necessity  rather  than  a  frill. 
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14.5  Dependency-directed  search 

Dependency  directed  search  is  an  important  problem-solving  technique  (Sussman  &  Stallman, 
l‘>76|.  In  DI  I1ACI  l;.  dependency-directed  searches  are  performed  by  constructing  a  generator  which  will 
construct  sets  of  consistent  choices  from  a  collection  of  alternatives.  I'.ach  set  of  alternatives  is  represented  by 
a  search  frame.  The  alternatives  are  assumed  to  be  mutually  exclusive  and  exhaustive,  such  as  the  status  of  a 
process  instance  or  the  Ds  values  of  a  quantity. 

fo  get  a  generator,  the  macro  wi  th-oo-Generator  is  used.  Its  syntax  is: 

( Wi  th-DO-Gener  a  tor  <name>  ■  <hody>) 

where  own  >  will  be  bound  to  a  new  generator  that  will  exist  during  die  execution  of  <bo,h>.  Generators  are 
implemented  as  flavors,  so  messages  are  provided  for  adding  search  frames,  initializing  the  generator,  and 
making  choices.  A  contradiction  handler  is  automatically  added  to  the  premise  controller's  stack  to  catch 
contradictions  due  to  inconsistent  collections  of  choices.  When  making  a  set  of  choices,  the  generator  will 
respect  the  constraints  in  the  IMS.  In  particular,  if  one  element  of  the  set  of  alternatives  is  already  known  to 
be  true  then  only  it  is  selected,  and  if  some  element  is  false  then  that  choice  is  skipped. 

14.6  Quantity  representation 

GIZMO  uses  a  specialized  representation  to  draw  conclusions  about  quantities  efficiently. 
Quantities,  signs,  magnitudes,  and  inequality  statements  arc  all  instantiated  as  database  items  with  extra 
properties.  Items  that  represent  quantities  contain  pointers  to  items  that  represent  their  amounts  and 
derivatives.  Items  that  represent  numbers  have  pointers  to  items  that  represent  their  signs  and  magnitudes 
and  an  index  that  describes  what  comparisons  with  other  numbers  have  been  made.  Items  representing  signs 
include  three  IMS  nodes  which  represent  the  possible  values  for  the  sign  (-1.  o,  t).  Items  representing 
magnitudes  have  I  MS  nodes  repiesenting  die  possibility  of  the  magnitude  being  greater  than  or  equal  to 
zero,  .is  well  as  an  index  of  ordering  statements.  These  items  arc  constructed  whenever  a  Has-Quantity 
assertion  is  made,  when  an  attempt  is  made  to  reference  some  part  of  quantity,  or  an  inequality  statement  is 
made. 

When  an  assertion  corresponding  to  an  inequality  statement  is  made  (Greater-fhan,  Less-Than,  or 
Equal -To),  i  special  object  is  created  to  represent  the  comparison.  This  special  object  has  three  1'MS  nodes 
which  represent  the  belief  in  the  two  numbers  being  less  than,  greatei  than,  or  equal  to  the  other.  All  other 
inequality  statements  concer  ,g  the  two  numbers  arc  constructed  so  that  these  I  MS  nodes  arc  associated 
with  the  appropriate  statements. 

Most  of  the  inferences  concerning  quantities  are  drawn  by  IMS  clauses  dial  arc  created  when  die 
entity  involved  is  created.  Sections  7.2.1  and  7.2.2  describe  the  particular  facts  used. 

f  inding  the  ordering  between  two  numbers  (or  magnitudes)  is  done  consequently.  The  asserted 
inequality  relationships  form  a  lattice  which  is  searched  to  answer  ordering  questions.  The  procedure  is 
complete  in  the  sense  that  if  the  ordering  can  be  deduced  by  transitivity  on  the  set  of  inequalities,  it  will  be 
deduced.  I  he  search  results  are  fully  instilled  by  recording  the  dependence  of  the  answer  on  the  particular 
nodes  used. 

One  additional  I'c.iltirc  bears  remarking.  The  enemy  of  lattice  models  is  connectivity;  if  too  many 
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items  .ire  linked  then  the  search  can  encompass  all  of  the  inequality  assertions  if  the  answer  cannot  he  found. 
Placing  zero  in  the  lattice  would  have  precisely  this  effect:  walking  "down"  from  a  positive  number  will  result 
in  visiting  every  negative  number!  Clearly  this  should  he  avoided,  and  indeed  it  can  -•  signs  are  God's  way  of 
disconnecting  a  lattice,  zero  is  never  placed  in  the  lattice,  and  sign  information  is  used  both  to  answer  certain 
questions  quickly  (such  as  when  asking  for  the  ordering  of  two  numbers  of  different  signs)  and  to  limit  search 
by  cutting  it  off  w  hen  the  sign  changes. 


i 


l 


! 


I 


I 


I 


7X 


END 

■ 

i 

I 

FILMED 

i. 

2-85 

DTIC 


